Privacy Policy

Privacy-First Design

ZapTransfer is built with privacy by design, featuring end-to-end encryption and zero-knowledge architecture:

• End-to-end encryption is enabled by default
• We mathematically cannot access your encrypted files
• No accounts or personal information required
• Files are automatically deleted after expiration
• Analytics only with your explicit consent
• No ads or invasive tracking

What We Don't Collect

Unlike many file sharing services, ZapTransfer does not collect:

• Personal information or account details
• Email addresses or contact information
• Browsing history or invasive tracking cookies
• File contents or metadata (we can't access encrypted files)
• Encryption keys (stored only in URL fragments, never sent to servers)
• Personal data through analytics (when analytics are declined)

What We Do Collect

We collect minimal information necessary to operate the service:

• Anonymous usage statistics (file sizes, transfer counts)
• Error logs for service reliability
• Basic server logs for security and performance
• Website analytics (only with your consent) via Google Analytics

This data is anonymized and cannot be linked back to individual users.

Data Storage and Security

ZapTransfer uses end-to-end encryption with a zero-knowledge architecture:

• Files are encrypted in your browser before upload using AES-GCM 256-bit encryption
• We store only encrypted data - we cannot access your file contents
• Encryption keys never leave your browser or reach our servers
• Keys are stored in URL fragments, which browsers don't send to servers
• Stored securely on Cloudflare's global infrastructure
• Automatically deleted after expiration (default 7 days)
• Never permanently archived or backed up
• Even if our servers were compromised, your files remain encrypted and inaccessible

Encryption Options

ZapTransfer offers flexible encryption settings:

• End-to-end encryption (default): Maximum privacy with zero-knowledge architecture
• Standard encryption: Server-side encryption for compatibility (can be disabled)
• You can choose your preferred level of encryption for each transfer
• Both options include automatic file deletion and password protection

Third-Party Services

We do not share, sell, or rent any personal data to third parties. When you consent to analytics, we use Google Analytics to understand website usage patterns. You can decline analytics and still use all features normally.

Cookie Consent

We ask for your explicit consent before loading any analytics. You can:

• Accept analytics cookies to help us improve the service
• Decline all analytics and use ZapTransfer with zero tracking
• Change your preference by clearing your browser data

Legal Compliance

Our zero-knowledge architecture provides strong legal protections:

• We cannot access encrypted file contents, even under legal compulsion
• Encryption keys are never transmitted to or stored on our servers
• We can only provide encrypted data (which is useless without keys)
• We may be required to provide anonymized usage statistics if compelled by law
• For non-encrypted transfers, standard data protection laws apply

International Data Transfers

Your encrypted files may be stored on Cloudflare's global network, which may include servers outside your country. However, this doesn't affect your privacy because:

• Files are encrypted before leaving your device
• Server location is irrelevant when data is end-to-end encrypted
• No jurisdiction can force decryption without the client-side keys
• Your encryption keys never travel across borders (they stay in your browser)

Changes to Privacy Policy

Any changes to this privacy policy will maintain or strengthen privacy protections. We will never weaken our commitment to your privacy.