Privacy Policy & Zero-Knowledge Guarantee

🛡️ 1. The Zero-Storage Architecture Principle

Unlike traditional cloud transfer providers like WeTransfer, Dropbox, or Google Drive, TransitFiles never uploads your files to any central cloud server or database.

Your files stream directly device-to-device through an encrypted WebRTC DataChannel (browser memory to browser memory). When the transfer completes, the connection is instantly closed and no trace remains on any intermediate server.

🚫 2. Data We Do NOT Collect

• Zero File Contents: We do not hold, scan, index, or store your documents, videos, photos, or archives.
• Zero Personal Identity: No registration, passwords, email addresses, phone numbers, or credit card info are required.
• Zero Tracking Cookies: We do not use third-party marketing cookies, cross-site trackers, or user profiling beacons.

⚡ 3. Ephemeral Signaling Data

To establish a direct peer-to-peer connection between two browsers, small metadata packets (Session Description Protocol - SDP and ICE network candidates) are temporarily exchanged through our Cloudflare Worker edge bridge.

This signaling handshake data:

• Is retained in RAM for less than 60 seconds.
• Contains only network routing information and 6-digit room PINs.
• Is automatically purged immediately after the handshake is finalized.

🔐 4. End-to-End Encryption (E2EE)

All direct WebRTC peer connections are secured by default with DTLS (Datagram Transport Layer Security) and SCTP protocol encapsulation. No third party, ISP, or intermediary can eavesdrop or tamper with the payload in transit.

📜 5. Compliance (GDPR & CCPA)

Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), TransitFiles complies with the strictest privacy by design standards because no personal identifiers are processed or stored.