Privacy Policy

1. What Wisp does

Wisp temporarily stores encrypted transfer data so a recipient with the transfer code can download it. Transfers are removed when they expire. One-time transfers are removed after the browser has completed their download.

2. What we can't see

Files are encrypted in your browser before upload and decrypted in the recipient's browser. We store and serve encrypted file data — we do not have the ability to open, view, scan, or otherwise access the contents of what you transfer. File sizes remain approximately visible from the encrypted data length. Anyone with a transfer code can access that transfer; treat a code like a password and share it only with people you trust.

3. Information we collect

Wisp does not require a user account, profile, or email address. To operate, secure, and improve the service, we necessarily handle:

• Transfer codes, encrypted file data, file sizes, and expiry settings
• Technical request information such as IP address, timestamps, and server logs, used for security, abuse prevention, and diagnosing problems

4. Cookies and analytics

Wisp does not use Google Analytics, third-party advertising trackers, or any other third-party analytics service. In particular, the receive page's web address includes your transfer code, so sending that address to a third-party analytics provider would mean sharing the code with them too — we don't do that. We don't set tracking cookies. Any traffic metrics we look at come only from our own server request logs described in Section 3.

5. How we use information

We use the information above to operate the service, enforce our Terms of Use, prevent abuse and fraud, maintain security, comply with legal obligations, and understand aggregate usage so we can improve Wisp. We do not sell your personal information.

6. Sharing and disclosure

We may share limited information with: (a) service providers who help us run the service (such as hosting providers), bound by their own confidentiality and data-handling obligations; (b) law enforcement or other parties when required by valid legal process, or when we believe in good faith that disclosure is necessary to comply with the law, protect the rights or safety of TwoBits or others, or investigate suspected illegal activity; and (c) a successor entity in the event of a merger, acquisition, or sale of assets.

7. Data retention

Encrypted file data is deleted automatically when a transfer expires or, for one-time transfers, once the download completes. We may retain limited technical logs and backups for a reasonable period afterward for security, abuse prevention, and legal compliance purposes.

8. Illegal content and reporting

We do not tolerate the use of Wisp to store or share material that is illegal, including material that sexually exploits minors. If we become aware of such material, we will remove it and report it to the appropriate authorities, including the National Center for Missing & Exploited Children where legally required, and cooperate with law enforcement. To report suspected abuse or illegal content, contact us using the information in Section 12.

9. Security

We use reasonable technical measures to protect the information we handle, including client-side encryption of your file contents. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

Wisp is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has used the service, contact us and we will take appropriate action.

11. Your rights

Depending on where you live, you may have rights to access, correct, or delete certain personal information we hold, or to object to or restrict certain processing. Because Wisp does not require an account and we cannot see file contents, our ability to identify information tied to a specific person is limited to technical/log data described above. To make a request, contact us using the information below and we will respond as required by applicable law.

12. Changes; contact

We may update this policy as the service evolves or legal requirements change; material changes will be posted on this page with an updated date. For privacy questions, data requests, or to report abuse, contact us at [email protected].