Privacy

The short version

There are no accounts, no cookies and no analytics of any kind. Nothing you do here is tracked across sites, profiled, or sold, because none of the machinery that would make that possible exists in the app. What we hold is the transfer itself, and only until it expires.

What is stored while a transfer is alive

• The files you upload, as their raw bytes, in object storage.
• The text of a note, if you sent a note rather than files. It is stored as ordinary text in the database.
• Details about each file — its name, size and type — so the receiving device can list the transfer before downloading it.
• The transfer’s own record: its code, when it was created, when it expires, how many times it has been downloaded, and whether it was set to burn after collection.
• A hash of the manage token that lets you delete your own transfer. The token itself never leaves your device except when you use it.

What is not stored

• No account, name or email address. You are never asked for one and there is nowhere to put one.
• No cookies. The app sets none at all.
• No analytics, tags or third-party scripts. No Google Analytics, no error-reporting service, no advertising or social pixels. The pages load nothing from anyone else.
• No IP addresses in the database. Your address is used as a short-lived key in memory to enforce rate limits, and it is discarded whenever the server restarts. It is never written down beside your transfer.
• No browsing history. Nothing records which transfers a given device looked at.

What your own browser keeps

Two things are stored locally on your device, not on the server. Your light or dark theme preference, and — for transfers you sent — the token that lets you check on or delete them. Both live in your browser’s local storage, are readable only by this site, and are gone if you clear your browsing data. Clearing it means you lose the ability to manage transfers you sent earlier; it does not delete them.

How long anything lasts

You choose 1 hour, 24 hours or 7 days when you send. At the end of that window the files and the record of them are deleted outright, not hidden or marked inactive. A cleanup job sweeps expired transfers every hour, and every read independently checks expiry and deletes what it finds, so an expired transfer is unreachable even if the sweep never runs.

A transfer set to burn after download is deleted as soon as its last file has been collected. You can also delete any transfer yourself, at any time, from the manage link you were given when you sent it.

Who can see your transfer

Transfers are not encrypted end to end. Anyone who has the code can download the contents, and the people who operate the server are technically capable of reading the files and notes stored on it. We do not do this, but you should assume it is possible — encrypt anything genuinely sensitive yourself before uploading it.

The code is the only thing protecting a transfer, so treat it like a password. Send it over a channel you trust, and prefer a short expiry or burn-after-download for anything you would rather not leave sitting on a server.

Other people in the chain

Tachy runs on hosting and object-storage providers, which means those companies hold the files on our behalf and may keep their own connection logs — typically including IP addresses — as part of running their networks. That is outside the app’s control and is normal for anything on the internet. We do not send your data to anyone else, and there are no advertising or analytics partners.

Children

Tachy is not directed at children and asks for no personal information from anyone, of any age.

Changes to this page

If what the service stores changes, this page changes with it and the date at the top moves. There is no mailing list to notify, because we do not have your address.

Questions

Write to hello@tachy.app.