Tranzfer keeps as little about you as it can and deletes files when their delivery ends. This page lists everything we store, why, and who else touches it.
What we store
- Your account. Your name, email address and profile photo from Google when you sign in. Google also returns sign-in tokens; we never use them, and we store the ones that could act on your Google account encrypted. Nothing else from your Google account.
- Your sign-up. The IP address you created your account from, so one network can't open hundreds of accounts.
- Your sessions. A session cookie that keeps you signed in, and the IP address and browser of each session, so a session can be traced if your account is misused.
- Your deliveries. Titles, notes, file names, sizes, folder paths, the link's expiry, a hash of its password if you set one, and the delivery's status. We need these to show your dashboard and serve the link.
- Your files. The bytes you upload, stored until the delivery ends.
- Your file requests. The title, instructions and limits you set. Someone uploading through one types their name and, if they want, an email address. Both stay with the delivery their upload makes, so you can see who sent it.
- Download reports. A recipient's browser tells us when it started each file and when it finished, so your dashboard can show the delivery arrived. No name or IP address comes with it.
- Emails you send. When you email a link, we send it to the addresses you type and keep only whether each send worked. The addresses aren't stored.
- Your plan. Which plan you're on, when it renews, and any access code you redeemed. Card details never reach us; Polar holds them.
- Plan waitlist. If you ask to hear when a paid plan opens, the email address you give and the plan, whether or not you have an account.
- Diagnostics. Timings and errors from uploads, downloads and server requests, so we can find what broke. We strip IP addresses, link tokens and query strings out of these before they're stored.
- Rate limits. Some limits count requests per IP address. Cloudflare keeps those counts for a minute at most. Link password and access code attempts are counted in our database instead: each records when it happened, the link or account, and for a password the IP address it came from.
Recipients who open a link don't create an account. We don't track them beyond the download reports, password attempts and request diagnostics above.
How long it lives
- Files are deleted within minutes of their delivery expiring or being cancelled. Any file left over for any reason is deleted by a storage rule 30 days after upload, and unfinished uploads are cleared after 7 days.
- Delivery records, with an uploader's name and email and the download reports, stay in your history until you delete your account.
- The IP address you signed up from is deleted 24 hours after you sign up.
- Password and access code attempts are deleted within a few minutes.
- A waitlist address stays on the list until you ask us to remove it.
- Diagnostics are kept for up to 30 days.
- Your account stays until you ask us to delete it.
Who processes it
- Cloudflare runs the app, its database and file storage (R2), and sends our emails.
- Google handles sign-in.
- Polar is our merchant of record and handles checkout, payments, tax and the billing portal.
- Axiom stores the diagnostics described above.
We don't sell your data, and we don't use advertising or third-party tracking cookies.
Your choices
You can cancel any delivery from your dashboard, which deletes its files. You can ask us for a copy of your account data, to correct it, or to delete your account by emailing support@tranzfer.app. We answer within 30 days.
Changes
If we change what we collect or who processes it, we'll update this page and change the date at the top. Big changes get an email first.