ZapFile.ai

Privacy Policy

The Short Version

We don't collect or store your files. We can't see what you're sharing. We keep minimal logs just to keep the service running. That's it. If you want the legal details, keep reading.

What We Collect

Files You Transfer

We do not retain your file contents. Files are encrypted in transit and temporarily staged during the transfer window, then automatically and permanently purged once the download completes. We have no access to file contents and do not analyse, scan, or log them.

Transfer Metadata

To coordinate transfers we temporarily hold: room codes, connection timestamps, file names and sizes. This data is automatically deleted once the transfer completes.

Server Logs

Our server keeps basic logs for debugging and preventing abuse: IP addresses (hashed after 7 days), timestamps, room creation events, connection attempts. These logs are kept for 30 days maximum, then deleted.

Analytics

We use Google Analytics to understand how people use ZapFile: page views, browser type and OS, general location (country level), and transfer success/failure rates. Google Analytics is only loaded after you give consent via our cookie banner. See our Cookie Policy for details.

Advertising

ZapFile is ad-supported. We use Google AdSense to display advertisements on this site.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users of ZapFile based on their visit to this site and/or other sites on the internet.

AdSense is only loaded after you give consent via our cookie banner. If you decline marketing cookies, AdSense will either not load or show non-personalised ads only.

You may opt out of personalised advertising by visiting www.aboutads.info/choices or Google's Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalised advertising by visiting www.networkadvertising.org/choices.

What We DON'T Collect

  • Your files or their contents
  • Names or email addresses (we don't have accounts)
  • Browsing history outside of ZapFile
  • Any personal data beyond what is described in this policy

How We Use Your Data

  • Make the file transfers work (can't avoid this)
  • Prevent abuse and spam
  • Debug issues when things break
  • Understand basic usage patterns (like peak hours)

That's it. We don't sell data, we don't share it with advertisers, we don't use it for marketing.

Cookies

We use a small number of cookies for site functionality, analytics, and advertising. You can manage your preferences via the cookie consent banner shown on your first visit, or at any time via the “Cookie Settings” link in the footer. See our Cookie Policy for the full list.

Data Sharing

We don't share your data with anyone, with a few exceptions: legal requirements (court order, subpoena, etc.), and our hosting provider (access to server logs in the normal course of providing hosting services). We will never sell your data. Ever. That's not our business model.

Security

All transfers use TLS encryption in transit and AES-256 encryption at rest. Our servers use HTTPS and standard security practices. The strongest protection we offer is that file contents are never permanently retained — data that doesn't exist cannot be breached.

Your Rights

Access your data: Since we don't store personal data or accounts, there's not much to access. But if you want to know what server logs we have for a specific IP address, email us. Delete your data: Files are never stored. Server logs auto-delete after 30 days. If you want immediate deletion of logs related to a specific IP, email us. Opt out: Don't use the service. Seriously - we have no accounts, no tracking across sessions, nothing to opt out of beyond just not using ZapFile.

Children's Privacy

We don't collect personal information from anyone, including children. The service works the same regardless of age. That said, parents should supervise what their kids are sharing online, regardless of the service used.

International Users

ZapFile works worldwide. Our infrastructure is operated from Canada. If you are in the EU and have concerns about data transfers, note that we collect minimal data, retain no file contents, and all transfer metadata is automatically deleted once a transfer completes.

PIPEDA Compliance (Canada)

ZapFile is based in Toronto, Canada, and our handling of personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) — Canada's federal private-sector privacy law.

Under PIPEDA, we are committed to the following ten fair information principles:

  • Accountability: ZapFile is responsible for all personal information under its control. Our privacy contact is [email protected].
  • Identifying purposes: We collect only what is needed to operate the transfer service — basic server logs and anonymised analytics. No files, no accounts, no profiles.
  • Consent: By using ZapFile you consent to the minimal data practices described in this policy. No account sign-up means no hidden consent layers.
  • Limiting collection: We collect only the minimum data necessary. File contents are never retained.
  • Limiting use, disclosure, and retention: Transfer metadata is deleted automatically once a transfer completes. Server logs are purged within 30 days.
  • Accuracy: We hold no personal profiles, so there is nothing to keep inaccurate.
  • Safeguards: All data in transit is protected by TLS and AES-256 encryption. File contents are never permanently stored.
  • Openness: This policy is publicly available and written in plain language.
  • Individual access: You may request any server logs associated with your IP address by emailing us. We will respond within 30 days as required by PIPEDA.
  • Challenging compliance: If you believe we have not handled your information in accordance with PIPEDA, you may contact us or file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Changes to This Policy

If we change how we handle data, we'll update this page and note the date at the top. Big changes? We'll put a notice on the homepage.

Questions?

If something's unclear or you have privacy concerns, email us at [email protected]. We're real people and we'll actually respond.