BBuddySend

Privacy Policy

Last updated: 2026-05-13

1. Overview

BuddySend is a file-sharing service that lets you share files using a 6-digit code. This page explains what data we collect, how long we keep it, and what we do with it. If you have questions, reach us via the contact page.

2. What we collect

  • Account data — when you register: email, name, and a hashed password. Passwords are stored as scrypt hashes; we never see your plaintext password.
  • Files you upload — stored temporarily on our CDN, deleted automatically after the transfer window expires or once a download completes.
  • Transfer metadata — file names, sizes, MIME types, transfer codes, upload/download timestamps, and approximate geolocation derived from IP.
  • Technical data — IP address, basic browser information (used for rate limiting and abuse prevention).

3. What we do not collect

  • We do not open, scan, or inspect the contents of your files.
  • We do not sell your data to third parties.
  • We do not use third-party advertising trackers.

4. How long we keep your data

  • Files are deleted automatically after the transfer expires or once the recipient downloads them.
  • Transfer records (metadata only, not contents) may be retained for a short period for abuse prevention.
  • Account data is retained while your account is active. You can ask us to delete it via the contact page.

5. Sharing with third parties

We rely on a small number of infrastructure providers (CDN, database hosting). They process data on our behalf and are bound by their own privacy commitments. We do not share your personal data with anyone else, except where required by law.

6. Cookies and local storage

We use browser local storage to keep you signed in (a JWT). We do not use tracking cookies.

7. Your rights

You can request access to or deletion of your account data at any time by contacting us. We respond within a reasonable timeframe.

8. Security

All traffic uses HTTPS. Passwords are stored as scrypt hashes. Files are removed from storage on expiry. No system is ever 100% secure — we make a good-faith effort to protect your data and respond promptly to security reports.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be announced on the home page or by email.

10. Contact

For any privacy-related question, reach us via the contact page.