Zero Cloud Storage.
100% On-Device Privacy.
Last Updated: August 2026 • Document Version 1.0
1. Zero Cloud File Retention
We do not own or maintain file storage servers. When you share a file or folder, chunks stream directly from your machine's physical storage to the recipient machine over encrypted WebRTC peer channels. No file data is ever stored on central servers.
2. End-to-End Encryption (E2EE)
All transfers support client-side AES-256-GCM encryption with PBKDF2 key derivation using the Web Crypto API. Even signaling servers cannot read or reconstruct transferred chunks without the sender's passphrase.
3. Sandboxed Local File Vault
Files received or saved in the Local Vault live exclusively inside your browser's sandboxed Origin Private File System (OPFS) and IndexedDB database. They never leave your physical device unless you explicitly share them.
4. Minimal Account Telemetry
When you sign in with Google or Email, we store only your display name, email handle, and user identifier needed to generate your custom Dropbox-style share URLs (e.g. /:username).
Data Transmission & WebRTC Signaling
Webshare uses Firebase Firestore solely to exchange initial connection handshakes (Session Description Protocol / ICE candidates) between the sender and recipient. Once the WebRTC DataChannel or direct LAN socket is established, all communication occurs peer-to-peer without server intervention.
Offline Tethering & LAN Transfers
When utilizing the Desktop Companion Daemon or LAN mode, file data transfers over your private local subnet or direct Ethernet cable without routing any traffic over the public internet.
User Rights & Local Data Deletion
You have full control over your data. You can delete individual files or wipe your entire Local File Vault at any time directly through the Local Vault interface with one click.