Updated: 2025‑10‑05
1. Controller
Privately operated website/app. Contact: info@x-transfer.net. No company involved.
2. Summary
Direct, end‑to‑end protected P2P transfer via WebRTC. The server handles signaling; a TURN server may relay packets when needed (no content storage).
3. Data we process and purposes
- Technical logs (IP, user agent, timestamps) for operation and security (Art. 6(1)(f) GDPR).
- WebRTC connection data (SDP/ICE). When TURN is used: packet relay only; contents remain protected by DTLS.
- Optional account data (if you register/sign in): email/username — to provide account features (Art. 6(1)(b) GDPR).
- Client‑side preferences (e.g., language/theme) in your browser storage — convenience only, no tracking cookies.
- Optional technical error reports via server→Discord relay, without file contents — stability and troubleshooting.
4. No content storage
File contents are not stored on servers; transport encryption via DTLS.
5. Recipients/third countries
Hosting/signaling, possibly a TURN provider; Discord (USA) for error reports. A third‑country transfer may occur, protected by appropriate safeguards.
6. Retention
Logs are kept only as long as necessary. Local preferences remain in your browser until you remove them. Error reports are regularly purged.
7. Your rights
Access, rectification, erasure, restriction, data portability, objection to processing under Art. 6(1)(f), and the right to lodge a complaint with a supervisory authority.
8. Security
TLS for the website/signaling, DTLS for WebRTC. Built with data minimization.
9. Necessity
Technical connection data is required to use the service. Registration is required only for optional account features.
10. Changes
This notice may be updated; the current version is shown here.