Who is responsible
DLW FINANCES, the publisher of TransferThing (see the legal notice), is responsible for the data described here. Contact: contact@transferthing.com.
Your transfers
A free transfer without an account asks for no personal data. We keep its metadata: file names, sizes and types, the transfer’s name and message, country, language and device, where the visit came from, and dates.
Your account
With an account: your email address, your password in derived form (never in clear), your sessions and your transfers. The address is only used for the account: signing in, verification, notices about your links and your plan. No newsletter.
Payment
Payment happens on our payment provider’s page: your bank details never reach our servers. It sends us the amount, the country and its payment identifiers. A transfer paid without an account asks for an email address, for the link and the invoice, and, if you wish, a name or address for the invoice.
Security and abuse prevention
Against abuse, we keep hashed connection fingerprints, never the IP address. Cloudflare Turnstile checks that a request comes from a real browser. Technical logs, kept for 7 days, contain neither IP addresses nor file content.
Why, and on what basis
Running the service, your account and your purchases: performance of the contract. Invoices: legal obligation. Abuse prevention and cookieless usage measurement: our legitimate interest in protecting and improving the service. Google Analytics and Google Ads: your consent, where the law requires it.
How long we keep it
Files: until the link expires. Transfer: erased within the hour after that without an account, 30 days later with a free account, kept while Pro is active. Reported or blocked transfer: kept to follow up the report, at most one year after it is closed if not blocked, without its files if blocked; the reporter’s email, 90 days. Usage facts: about 13 months. Account: until you delete it, at once, from its Settings or on request. Invoices: ten years, even after the account is deleted (accounting law). Backups: erased within 30 days.
Who else handles your data
Cloudflare hosts the service, the files and the emails, and handles security and audience measurement; our payment provider handles payments; Google measures the audience and our ads with your consent, and receives from our servers the amount and a transaction number of a purchase, never your email address. Transfers outside the European Union (United States) rely on an adequacy decision (the EU–US framework) or on the European Commission’s standard contractual clauses.
Your rights
You can access, correct, delete, restrict, object to and take away your data by writing to contact@transferthing.com; we answer within a month. A transfer sent without an account can only be found from its link: include it in your request. You can also complain to the CNIL (cnil.fr) or to the authority of your country.
Keep reading
Worried about some content? Report abuse