Privacy Policy

Last updated: October 16, 2026.

Files and text

Files and text are sent over a WebRTC data channel between the paired browsers. WebDrop does not upload, store, or inspect file contents on its application server. The receiver must accept an offered file before its contents are sent. Transfer history stays in page memory and is cleared when the page closes; saved files remain on the receiving device.

Manual connection links

There is no WebDrop pairing server, room database, or file storage. Your browser generates an invitation and a response using WebRTC session descriptions. These are encoded in the URL fragment after # and exchanged manually. Fragments are not sent to Cloudflare when the page is loaded. They can contain network addresses and connection fingerprints, so share links privately with the intended person. Your messaging or clipboard service may process anything you choose to share through it.

Cloudflare serves static page files and may process IP addresses and request metadata under its own policies. There is no application backend collecting connection information. Closing or refreshing the page ends the live session; a previously copied link cannot restore that session. Files already saved by the receiver remain on their device.

Network discovery

Google and Cloudflare STUN servers help discover usable network routes and receive network connection information. The paired device may learn your network address. No TURN relay is configured. WebRTC encrypts data in transit; compare the verification code on both screens to help confirm the intended peer.

Browser permissions

Clipboard access is requested only when you click a Copy control. A disk save picker, where available, is opened only after you accept a file. No camera or microphone permission is requested. No advertising or analytics scripts are installed.

Provider information: Cloudflare and Google.