Privacy policy
This policy covers BeamDrop at wetransfertool.com, run by Maya Chen in Seattle, Washington, USA. Contact: hello@wetransfertool.com.
The main point
Your files go directly from the sender’s device to the recipient’s device. BeamDrop’s server only exchanges the connection information the two browsers need to find each other. It does not receive, store or relay files, file names, file sizes or file lists.
What we process and why
Connection information (signaling)
When you create or open a link, your browser connects to our signaling server. The server creates a random room ID and a 6-character code, and passes WebRTC session descriptions and ICE candidates between the sender and the recipient. These messages contain network addresses (IP addresses and ports) and encryption certificate fingerprints. They are forwarded immediately and not stored. Rooms exist only in the server’s memory and are deleted when the sender leaves, or after 24 hours at most.
IP addresses
Our server sees your IP address, as every website does. We use it transiently to make connections and to rate-limit abuse (for example, too many code guesses from one network); rate-limit counters are kept in memory for minutes. The hosting web server also writes standard access logs (time, IP address, requested page, browser user agent, status code), which may include the room link you opened. These logs are used for security and aggregate traffic statistics and are deleted on a rolling basis.
STUN servers
To discover its public address, your browser contacts public STUN servers operated by Google (stun.l.google.com) and Cloudflare (stun.cloudflare.com). They see your IP address for that request only. They never see your files.
The other person
A direct connection means the sender’s and recipient’s browsers learn each other’s IP addresses. That is inherent to peer-to-peer transfer.
What we don’t do
- No accounts, no email collection, no advertising.
- No analytics scripts, tracking pixels, third-party fonts or embeds.
- No cookies. The site stores nothing in your browser except, on the receiving side, a small service worker that turns incoming data into a download, and temporary files in browser storage on Safari that are deleted after saving.
- We don’t sell or share personal information.
Content and moderation
Because we never have your files, we cannot read, scan, moderate or remove them. Abuse reports about use of the service can be sent to hello@wetransfertool.com.
Your rights
Depending on where you live (for example under the GDPR or California privacy law), you may have rights to access or delete personal information. In practice we hold almost none: rooms are gone when you close the tab, and access logs are not linked to any identity. Email us and we will help with any request.
Children
BeamDrop is not directed at children under 13 and collects no information knowingly from them.
Changes
If this policy changes, we will update the date above and describe significant changes on this page.