Privacy Policy

Last updated: February 2026

freesend.io is built on a simple principle: collect as little data as possible. Here is exactly what we store and why.

Data We Collect

• Sender email (plaintext): Stored to send you a verification link and an upload confirmation. Automatically deleted when your transfer expires after 7 days.
• Sender email (hash): In addition to the plaintext address, we store a one-way SHA-256 hash of your email for abuse prevention. This hash cannot be reversed and is retained after the transfer expires.
• Recipient email: Stored temporarily to deliver the download notification. Automatically deleted when the transfer expires after 7 days.
• File metadata: Filename, file size, and MIME type are stored. File contents are stored in Cloudflare R2 and automatically deleted after 7 days.
• Transfer message: Your optional message is stored alongside the transfer and deleted after 7 days.
• IP address: Used for rate limiting only. Not stored persistently.
• Analytics: We use Plausible Analytics — a privacy-first, cookieless analytics tool. No personal data is collected. No cookies are set.

Data We Do NOT Collect

• No user accounts or passwords
• No browser fingerprinting
• No cross-site tracking
• No selling of data to third parties
• No file contents are read or scanned (except automated CSAM hash-matching)

Advertising

We show video advertisements through third-party ad networks (Teads). These networks may use cookies or similar technologies. You will be asked for consent before ads are shown, as required by GDPR.

Data Retention

All transfer data (files, metadata, emails) is automatically deleted after 7 days. We do not retain data beyond this period.

Your Rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, or delete your data. Since we do not store emails in plaintext, we cannot identify you from your email address alone. Contact us at privacy@freesend.io for any privacy requests.

Data Transfers

Files are stored on Cloudflare R2 (global CDN). Email delivery uses Resend.com. By using the Service, you consent to data being processed in these services.

Contact

Data controller: The Nexus Collective GmbH, Poststraße 14-16, 20354 Hamburg, Germany.
Contact: privacy@freesend.io

For our full legal notice, see the Impressum.