Privacy Policy
Our Commitment
Share.Ninja is built on a privacy-first principle. We do not sell, share, or monetize your personal data in any way. We collect only what is necessary to provide and improve the service.
Direct-only links and Nearby
When you send a direct-only link or send to a nearby device, files travel directly between the two devices, or through our relay when no direct path exists. In both cases the data is end-to-end encrypted and the relay sees only ciphertext. We cannot access your file contents.
Cloud Sharing
When you use cloud sharing, files are encrypted before upload and stored on our servers until the link expires. After expiration, files are permanently deleted. We cannot access the contents of encrypted files.
Downloads
Each download of a link is recorded with its time and IP address. These records are used for rate limiting and abuse handling.
Account Data
If you sign in, we store your email address, display name, the names and public keys of your devices, and the storage you use. You can update or delete this information at any time from your profile.
Analytics & Cookies
We count website visits from our own server logs. There are no tracking scripts, no analytics cookies and no third-party trackers. Cookies are used only to keep you signed in. The apps carry no analytics.
Data Retention
Cloud-shared files are deleted automatically when their links expire or when you stop sharing. Sharing history is retained while your account is active. Server logs are kept for 30 days. Download records and the account audit log keep the IP address for 90 days, then only the event remains.
Where Data Is Processed
Our servers run at Hetzner in the EU. Encrypted files are stored on our own storage servers there and on Wasabi S3. Neither holds a key to your files.
Abuse Reports
Anyone holding a share link can report it. A report may include the link's key at the reporter's choice, which lets us review the reported content. The reporter's contact email is deleted once the report is handled.
Your Rights
You can request a copy of your personal data, correct inaccuracies, or request full deletion of your account and associated data at any time by contacting our support team or through your account settings. The audit log in your account settings shows the activity recorded for your account, with time, IP address and device.