1. Information We Don't Collect
Let's start with what we DON'T have access to:
- ❌ The contents of your files
- ❌ File names or file types
- ❌ Personal information about file recipients
- ❌ Your email address (no account needed!)
- ❌ Your real name or identity
- ❌ Payment information (it's free!)
🚫 Zero Data Collection
🔒 Complete Privacy
2. Information We Do Collect
To make the service work, we collect minimal metadata:
- ✓ Bundle creation timestamp
- ✓ Bundle name (what you choose to call it)
- ✓ Total bundle size
- ✓ Transfer completion status
- ✓ Basic analytics (page views, not tied to individuals)
📊 Minimal Metadata
🔍 Anonymous Only
3. How Peer-to-Peer Protects Your Privacy
BurritoShare uses WebRTC technology to create direct connections between browsers:
- Files travel directly from sender to receiver
- Data is encrypted end-to-end during transfer
- Our servers only help establish the initial connection
- Once connected, we're completely out of the loop
🔄 Direct Transfer
🔐 End-to-End Encrypted
4. Cookies and Tracking
We use minimal cookies:
- Session cookies to maintain transfer state
- No third-party tracking cookies
- No advertising networks
- No social media pixels
- Analytics via Mixpanel to improve the service (see below)
Analytics Tracking
We use Mixpanel to collect anonymous usage analytics (view our dashboard). We track:
- Page views and navigation patterns
- When share links are created (not the file names)
- Transfer initiation and completion events
- Transfer performance metrics (speed, duration)
- File sizes and types (e.g., "PDF", not the actual content)
We never track: file names, file contents, user identities, or any personal information.
📈 Anonymous Analytics
🚫 No Tracking
⏰
5. Data Retention
We keep minimal data for minimal time:
- Bundle metadata: Deleted after 30 days
- Transfer logs: Kept for 7 days for debugging
- No file contents are ever stored
- You can't request deletion because we don't know who you are
Maximum 30 days retention
🔧
6. Third-Party Services
We use these services to operate:
- STUN/TURN servers: Help establish peer connections (can't see file contents)
- Web hosting: Serves the website (doesn't touch your files)
- Mixpanel Analytics: Anonymous usage statistics (no personal data) - Mixpanel Privacy Policy
Essential services only
🛡️
7. Security Measures
We protect what little data we have:
- HTTPS encryption for all web traffic
- Secure WebSocket connections for signaling
- No file data to protect (by design!)
- Regular security updates and monitoring
Security by design
⚖️
8. Your Rights
Since we don't know who you are:
- No account to delete
- No personal data to export
- No profile to correct
- Complete anonymity by default
Anonymous by default
👶
9. Children's Privacy
BurritoShare doesn't knowingly collect data from anyone, including children. Since we don't collect personal information, we can't determine users' ages. Parents should supervise their children's internet use.
No age verification needed
🌍
10. International Users
BurritoShare works globally. Since files transfer directly between users and we don't store data, there are no complex international data transfer issues. Your files go directly to your recipient, wherever they are.
Works worldwide
👮
11. Law Enforcement Requests
If law enforcement contacts us:
- We can only provide the minimal metadata we have
- We cannot provide file contents (we never have them)
- We cannot identify users (no accounts)
- We'll resist overly broad requests
Limited data to share
📝
12. Changes to Privacy Policy
If we update this policy:
- We'll post changes here with a new date
- We'll keep the same privacy-first principles
- We'll never start collecting file contents
Privacy-first always
📧
13. Contact Us
Questions about privacy? Contact us through our website. We're happy to explain how we keep your transfers private.
Always available to help
📋 Quick Summary
👁️
What we see:
Bundle created, size, name
Minimal metadata only
🚫
What we don't see:
Your files, your identity, anything private
Complete privacy
⏱️
How long we keep data:
30 days max, usually less
Short retention
🤝
Who we share with:
Nobody (we have nothing to share)
Zero sharing
