Information We Process
Sendz is a utility for moving information between devices. To make this work, we process the files you upload and the text you paste. We do not require you to create an account, provide an email address, or provide any personal identifying information (PII).
File and Text Expiration
We use Google Cloud services (Firebase) to host our database and file storage. Every file and text snippet you upload is assigned a strict 12-hour expiration timestamp.
Exactly 12 hours after creation, our database security rules automatically block all read access to the metadata associated with your upload. At that point, the system will return a "permission denied" error, rendering the 6-digit code useless.
Important technical clarification regarding physical deletion: While our database and storage security rules mathematically enforce this strict 12-hour access lock, the actual physical deletion of the orphaned files and database metadata is handled asynchronously. We rely on Google Cloud Storage Object Lifecycle Management and Firestore Time-To-Live (TTL) policies to periodically sweep and permanently destroy the expired data from the hard drives. This physical destruction typically completes within 24 to 48 hours following expiration. Because the access rules immediately block downloads at exactly 12 hours, no expired content remains accessible while waiting for this backend cleanup to complete.
Anonymous Authentication
Although you do not log in, Sendz uses Firebase Anonymous Authentication behind the scenes. This assigns a temporary, anonymous identifier to your browser session. We use this identifier solely to verify that the person attempting to delete or overwrite a file is the same person who originally uploaded it.
Search Engine Visibility
We do not want your private transfers appearing in Google search results. All dynamically generated share pages (located at /s/[code]) are configured with strict noindex, nofollow, noarchive tags to instruct search engines not to crawl or index your content.
Logs and Infrastructure
Sendz is hosted using Vercel and Google Cloud (Firebase). Like all modern web applications, these infrastructure providers automatically log standard connection data, which may include your IP address, browser type, and timestamp, to maintain security and prevent abuse (such as Denial of Service attacks). We do not use third-party marketing analytics trackers or advertising cookies.