What WispFile stores

This page lists exactly what WispFile keeps, taken from how it is built. The formal Privacy Policy covers why, for how long, and your rights.

Never stored

Your files. They go from one browser to the other. On the free plan they never touch our servers; on paid plans, if two networks cannot connect directly, the encrypted bytes pass through our relay, which cannot read them and keeps nothing.
The key that decrypts them. It lives after the # in the link, which browsers never send to a server.
Link passwords, or anything derived from them.
IP addresses or file names in our logs.

Stored while a link exists

The file names and sizes you chose to share, the optional title and message, and the expiry you picked, so the receiver can see what is on offer.
For each finished or failed download: its size, whether it went direct or through a relay, and how it ended. Nothing about who downloaded it.

Stored only if you ask

If you ask to be emailed when a sender is back online, your address is kept until that one email is sent, then deleted. Unsent addresses are deleted after 7 days.

Stored if you sign in

Your email address, your name if you signed in with Google, your plan, and a record of each signed-in browser so it stays signed in (30 days). Only a fingerprint of the session and sign-in tokens is kept, never the tokens themselves.
Which of the links above are yours, so they appear in your history. Nothing more about them than for anyone else.
On a paid plan: the name and colour you chose for your receive page, whether you want download emails, how many bytes our relay carried for you this month, and a Stripe customer reference. Card details stay with Stripe. A Team owner’s list of the addresses on their team and their roles, and the team’s audit log: who added, removed or re-roled whom, who took down which link, and branding changes, by email address.
Your inboxes’ names. Their keys are made in your browser and kept only there and in the inbox links.

Network addresses

Two browsers that connect directly learn each other’s network address, as on a video call. In swarm mode, which a sender turns on per link, receivers connect to each other too. Our servers use addresses in memory to route connections and limit abuse, and do not log them.

Error reports

When the page crashes, a report may go to our error tracker. It is stripped of the link key and any link fragment before it leaves your browser, and it carries no user or address details.