Privacy policy

Last updated: 13 September 2026

In short: your files, file names and messages go directly between your devices, end-to-end encrypted. They never pass through or get stored on our servers. We have no accounts, no cookies and no analytics. The services that let the page load and the devices find each other see technical data such as IP addresses.

Who is responsible

Benoxy (benoxy.com) is operated by the publisher of this website. Contact: contact@benoxy.com.

What we do not collect

• The content of the files and text you transfer, their names and their sizes.
• Accounts, names, email addresses or phone numbers — Benoxy has no sign-up.
• Cookies, advertising identifiers or analytics: the site currently uses none.

What is processed, by whom, and why

Website hosting

When you load benoxy.com, our hosting provider (Vercel) processes standard technical request data — IP address, browser type, requested page and time — to deliver the site and protect it against abuse. We do not use these logs to profile visitors.

Connection (signaling) server

To let two devices find each other, each browser briefly connects to the public PeerJS signaling server. It processes a random session identifier, the IP addresses of the devices and technical connection details (such as network candidates) while the devices pair. It cannot see the encryption key or anything you transfer.

Network discovery (STUN) servers

Your browser contacts STUN servers operated by Google to discover how your device can be reached. These requests reveal your IP address to those servers and contain no content.

Your other device

A direct connection means the two devices learn each other's IP addresses, as with any peer-to-peer connection.

Storage on your device

• Theme preference (light/dark) in your browser's local storage.
• On the device showing the QR code: the session identifier, its key and the identifiers of the devices allowed to reconnect, in the tab's session storage, so a reload keeps the session. The browser deletes them when you close the tab.
• On the device that scanned the code: the session identifier, its key, a random device identifier and the other device's name, in the browser's local storage, so it can reconnect after a locked screen or a reload. They are kept for 10 minutes after the devices were last in contact and deleted once the session has expired (at the latest the next time you open Benoxy), or as soon as you leave the session.
• Received files stay in the browser's memory until you save them or close the page.

Donations

The donation link opens PayPal. PayPal only receives your data if you choose to donate, under its own privacy policy.

Legal basis and retention

Technical processing by the hosting and connection services is necessary to provide the service you request and to keep it secure (legitimate interest). We keep no record of your transfers. Hosting and signaling logs are kept by those providers according to their own retention policies. Some of these providers may process data outside your country.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal data about you and to object to its processing. Because we don't store transfer data or accounts, we usually hold nothing that identifies you; contact us at the address above with any request. You can also lodge a complaint with your data protection authority.

Children

Benoxy is not directed at children under 13.

Changes

If this policy changes — for example if we introduce advertising or analytics — we will update this page and its date before the change takes effect.