Terms and privacy

About these terms

These terms apply to everyone who uses Sharer: publishers who share files, people who download them, and people who report them. Using the service means you accept them. Publishers accept them, with the privacy notice, when they apply.

They describe how the service works today. Where they don't settle something yet, they say so.

Accounts and sign-in

You sign in with a link sent to your email address or with Google. Downloading never needs an account.

• Keep access to your email and any authenticator app secure. Actions taken through your account count as yours.
• Sensitive actions ask you to confirm it's you again.
• You can sign out of other sessions from your account's security settings at any time.

Publishing on Sharer

Publishing needs an approved application. Apply at Apply to join Sharer; a person reviews each application and may approve it, ask for more information or decline it.

• An approved application gets a workspace with one owner. The owner can invite admins and transfer ownership.
• Each upload gets its own new link. Uploading again never replaces an earlier file; it creates a separate one.
• Publishers can protect files and folders with download passwords. Names and other public page details stay visible without one.
• Storage and other operational limits apply to each workspace, and Sharer may change them.

Your content and your rights

You're responsible for what you upload and share.

• Upload only content you have the rights to share, and only content that's lawful.
• Mature content is allowed only within the rules Sharer sets for it, and only where it's lawful.
• Don't upload malware, or content meant to deceive people or take their data.
• Your content stays yours. You let Sharer store, copy and deliver it as far as running the service needs.

Sharer may refuse, restrict or remove content and accounts that break these terms.

Free to use, no payouts

Publishing and downloading are free. Sharer doesn't pay publishers, doesn't sell files on their behalf and isn't a marketplace.

Downloads and the sponsored window

Downloads are free and anonymous, and Sharer doesn't slow them down on purpose.

• When ads are on, the first Download click opens a page from Sharer's single private advertiser in a new window. The second click starts the file.
• Retrying or resuming a download doesn't open another window. If the window is blocked or closed, the download still works.
• Sharer sends the advertiser nothing about you or the file.
• A folder downloads as one ZIP file.

Fair use and abuse limits

To keep the service available, Sharer limits how many requests and downloads can run at once and how often some actions can repeat. The limits can change without notice.

• Don't work around limits, download passwords, removals or security checks.
• Don't overload the service or use it to attack others.

Reports, copyright and takedowns

Anyone can report a file or folder with the report link on its page, or with the report form. Copyright owners use the same form; Copyright notices explains how.

• A person reviews every report. A report on its own never removes anything, and it never gives the reporter authority over a file.
• When a copyright notice is validated, the file's page answers “not found” and its downloads stop.
• Publishers can appeal a decision. Lifting it needs a different reviewer from the one who made it.
• Sharer may also restrict content or workspaces on its own initiative to stop abuse or meet a legal obligation.

Retention and inactive files

Files stay until their workspace deletes them, unless they're removed under these terms.

Sharer's retention policy can also remove files nobody has downloaded for 14 days. Their page stays, and Download answers “File not found.” This cleanup is currently off for approved workspaces. If it's switched on, it applies as the published retention policy describes.

Keep your own copies of everything you upload.

API keys

Workspace owners and admins can create API keys for scripts and tools.

• A key acts for the person who holds it, within that person's current access and the key's scopes.
• Every key expires after 30 days, 90 days, 180 days or 1 year, as chosen when it's created. Sharer shows a key only once, so keep it secret.
• Owners can revoke keys at any time, and keys stop working when their holder loses access.

The API documentation lists the scopes and limits.

Deleting your account

You can delete your account at any time from Account privacy. If you own a workspace, transfer ownership first. The privacy notice explains what deletion keeps.

Sharer may suspend or close accounts and workspaces that break these terms.

Changes to the service

Sharer may add, change or remove features and limits. These terms will change after their legal review and as the service changes; each change gets a new version and date at the top of this page.

What we don't promise

Sharer is provided as it is. Beyond what these terms state, it makes no promise that the service is always available, free of errors or suited to a particular purpose, or that a file stays available.

Contact

For legal questions and lawful requests, email [email protected]. Report a file through its page; copyright notices go through Copyright notices.

What we measure

Page views

Clicky counts which page paths are viewed, in privacy mode: no cookies, anonymized IP addresses, and never the query string or page title.

Downloads

Each started download is counted once for its publisher, with a coarse country, device type and the referring site's name. We don't store IP addresses, browser details or full referring addresses with it.

Sponsored windows

When the first Download click opens a sponsored window, the page reports that an attempt was made. Nothing about you or the file is sent to the advertiser by Sharer.

Data we handle

Sharer handles personal data only as far as the service needs it. Depending on how you use Sharer, that includes:

• Your account: email address, display name, how you sign in, any authenticator app you add, and your sign-in sessions with their IP address and browser details. If you sign in with Google, also the name and profile picture Google shares.
• A publisher application: the contact name and email, publisher name, website, and what you write about your content and plans.
• Workspaces: workspace names, your role and its history, invitations with the invited email address, ownership transfers, and API keys you create. Sharer keeps only a hash of each key.
• File and folder details: names, descriptions, tags and who uploaded or changed them. The files themselves belong to the workspace and aren't part of your account data.
• Imports: the source address and file paths. Source credentials are stored sealed and destroyed 24 hours after the import ends, or after 7 idle days.
• Notifications and email: inbox items, your email preferences, and delivery records with the address used. After a bounce or complaint, a hash of the address goes on a do-not-send list.
• Downloads: each started download is counted for its publisher with a coarse country, device type and referring site's name. If you're signed in, your account ID is recorded with the download permission, which expires within minutes.
• Reports: the reason, your description, and an email address if you give one. Copyright reports need one. Reports are never linked to an account.
• Appeals and audit records: what you write in an appeal, and a record of security-relevant actions taken with your account.
• Abuse limits: your IP address, email address or account ID, turned into a keyed hash before it's counted. These hashes can still point to you, so Sharer treats them as personal data.
• Errors and hosting logs: error reports with the page path and browser type, and the host's request logs with IP address and browser details.

Sharer never asks for identity documents, payment details or passwords to other services, apart from an import source you choose to connect.

Why we use it

Each kind of data serves the part of the service it comes from:

• Signing you in, keeping your account secure and checking sensitive actions again.
• Reviewing publisher applications and setting up approved workspaces.
• Running workspaces: files, folders, teams, imports, API keys and download passwords.
• Delivering files, and showing publishers how many downloads started.
• Sending the email you need or asked for, and respecting bounces, complaints and mutes.
• Preventing abuse, investigating reports and answering legal requests.
• Counting page views and fixing errors, so the service keeps working.

Sharer doesn't sell personal data, and it doesn't build advertising profiles.

Who receives it

Sharer runs on the providers below. Each receives only what its job needs.

Two other parties receive data only through your own actions:

• The advertiser. When ads are on, the first Download click opens the private advertiser's page in a new window. Your browser then connects to the advertiser, which sees what any website sees, such as your IP address. Sharer sends nothing about you or the file.
• Import sources. When you import files, Sharer connects to the source you name, using the access you give it.

Workspace members see each other's display names. Publishers never see who downloaded their files or who reported them.

Cookies and browser storage

The cookies below are all Sharer's own, each needed for the feature named. None of them is used for advertising.

The site also keeps these in your browser:

Clicky runs on every page except the operator console, in privacy mode: no cookies, anonymized IP addresses, and only the page path.

How long we keep it

Most records are kept until they're deleted, either by you, by deleting your account, or by an operator. A few have fixed limits:

• Abuse-limit hashes: up to one hour.
• Repeat-request protection records: 7 days.
• Unused report forms: deleted a day after they expire.
• Import source credentials: 24 hours after the import ends, or after 7 idle days.
• Application access proofs: only the 5 newest per application.

Providers keep their own logs for the time their service sets. Files follow the workspace's retention rules, which are described in the terms.

Your rights

You can ask to see, correct or delete your personal data, or object to how it's used.

• With an account: go to Account privacy. There you can download your data, ask for a correction or object, and delete your account. Deleting needs a recent sign-in.
• Without an account, for example after sending a report: email [email protected]. Include the report receipt or the email address you used, so we can find the record.

Downloading your data and deleting your account happen right away. A person reviews every other request and answers it. Some deletions have to wait: transfer any workspace you own first, give up operator access if you have it, and let an open publisher application be decided (or its workspace be claimed). If a legal hold applies, your account is locked and deleted when the hold ends.

What deleting your account keeps

Deleting your account removes your personal data and stops the account from being used again. Some records have to stay:

• Security and audit records, moderation decisions and appeals, financial records and workspace approval records stay. They point to an anonymous account ID; an approval record also keeps the address the workspace was offered to.
• Files and folders you uploaded stay with their workspace, because they belong to it.
• A hold for a legal obligation, investigation or lawful request keeps the data it covers until it ends.
• If an email to you bounced or was marked as spam, the hashed address stays on the do-not-send list, so it isn't emailed again.

Sharer keeps a record of deleted accounts. If restoring a backup brings a deleted account back, it's deleted again. That record is in the same database for now, so a backup older than the deletion itself also predates the record; for that case Sharer keeps an offline list of deleted account IDs and deletes them again by hand.

Reports and contact details

A report, a copyright notice or a privacy request never gives anyone authority over a file or an account. A person reviews each one and decides what happens.

An email address left with a report stays private. The publisher never sees it, and reviewers open it only with a recorded reason. Copyright notices go through the report form; Copyright notices explains how.

Changes and contact

This notice will change after its legal review and as the service changes. Each change gets a new version and date at the top of this page.

For privacy questions, legal matters and lawful requests, email [email protected]. Report files through their page or the report form.