Privacy

What we store

Your public key, the name derived from it, when you were last seen, and the people you exchanged files with (only after you accepted a file). We don't ask for an email address or any other personal data.

What we never see

The contents, names and sizes of your files. They travel directly between browsers, encrypted end to end. The fingerprint in your link stays in the browser too.

Connection data

To connect two browsers, our server briefly relays setup messages that include network addresses. It doesn't keep them. When a relay is needed, our TURN provider forwards encrypted data it can't read.

How long we keep it

An identity unused for 90 days expires. You can remove anyone from your recent connections at any time, and clearing your browser data discards your identity on your side.

Cookies

Toss uses no cookies and no trackers. Your identity lives in your browser's local storage.