Privacy Policy

This page explains what data Share by Code stores and why.

Uploaded files and messages

Files and messages are stored for a maximum of 5 minutes. A file is deleted after it is downloaded, while a shared message is deleted when it is opened. Previewing a file does not delete it.

IP address

Your IP address is hashed and used for rate limiting, including repeated invalid code attempts and uploads from the same network. The hashed value is not used for tracking or advertising.

Device cookie

A small device cookie may be stored for up to one year to keep share access stable and apply upload and code-attempt limits. It is not used for tracking or advertising.

The site also stores your choice to dismiss this notice in your browser's local storage.

Bot Protection (Cloudflare Turnstile)

We use Cloudflare Turnstile on our website to protect our forms and services against spam, malicious attacks, and automated bot traffic. Turnstile is provided by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA).

How it works: Turnstile collects various client-side signals (such as your IP address, browser user-agent, TLS fingerprint, and cookies set by Cloudflare) to verify whether an interaction is made by a human or an automated program. This data collection happens in the background or upon interaction depending on the widget mode used.

Legal Basis: We process this data based on our legitimate interest in securing our website and protecting it from abusive automated scraping, spam, and bot activity (Article 6(1)(f) of the GDPR).

Data Privacy Addendum: For more information on how Cloudflare handles data or to review its privacy practices, please refer to the Cloudflare Turnstile Privacy Addendum.