Privacy Policy

1. Information We Don't Collect

Let's start with what we DON'T have access to:

• ❌ The contents of your files
• ❌ File names or file types
• ❌ Personal information about file recipients
• ❌ Your email address (no account needed!)
• ❌ Your real name or identity
• ❌ Payment information (it's free!)

2. Information We Do Collect

To make the service work, we collect minimal metadata:

• ✓ Bundle creation timestamp
• ✓ Bundle name (what you choose to call it)
• ✓ Total bundle size
• ✓ Transfer completion status
• ✓ Basic analytics (page views, not tied to individuals)

3. How Peer-to-Peer Protects Your Privacy

BurritoShare uses WebRTC technology to create direct connections between browsers:

• Files travel directly from sender to receiver
• Data is encrypted end-to-end during transfer
• Our servers only help establish the initial connection
• Once connected, we're completely out of the loop

4. Cookies and Tracking

We use minimal cookies:

• Session cookies to maintain transfer state
• No third-party tracking cookies
• No advertising networks
• No social media pixels
• Basic analytics to improve the service

5. Data Retention

We keep minimal data for minimal time:

• Bundle metadata: Deleted after 30 days
• Transfer logs: Kept for 7 days for debugging
• No file contents are ever stored
• You can't request deletion because we don't know who you are

6. Third-Party Services

We use these services to operate:

• STUN/TURN servers: Help establish peer connections (can't see file contents)
• Web hosting: Serves the website (doesn't touch your files)
• Analytics: Anonymous usage statistics (no personal data)

7. Security Measures

We protect what little data we have:

• HTTPS encryption for all web traffic
• Secure WebSocket connections for signaling
• No file data to protect (by design!)
• Regular security updates and monitoring

8. Your Rights

Since we don't know who you are:

• No account to delete
• No personal data to export
• No profile to correct
• Complete anonymity by default

9. Children's Privacy

BurritoShare doesn't knowingly collect data from anyone, including children. Since we don't collect personal information, we can't determine users' ages. Parents should supervise their children's internet use.

10. International Users

BurritoShare works globally. Since files transfer directly between users and we don't store data, there are no complex international data transfer issues. Your files go directly to your recipient, wherever they are.

11. Law Enforcement Requests

If law enforcement contacts us:

• We can only provide the minimal metadata we have
• We cannot provide file contents (we never have them)
• We cannot identify users (no accounts)
• We'll resist overly broad requests

12. Changes to Privacy Policy

If we update this policy:

• We'll post changes here with a new date
• We'll keep the same privacy-first principles
• We'll never start collecting file contents

13. Contact Us

Questions about privacy? Contact us through our website. We're happy to explain how we keep your transfers private.