Last updated 2026-04-24

Privacy Policy

This Privacy Policy explains what information we collect when you use WannaShare, how we use it, and the choices you have. We designed the Service to collect the minimum data necessary to run it.

What we collect

  • Account data: your email address and display name.
  • Authentication data: salted + hashed password, verification and reset tokens.
  • File data: the files you upload, their names, MIME types, and size.
  • Share metadata: link tokens, visibility, recipient emails, expiry, download counts.
  • Operational logs: IP address, timestamps, and endpoint on auth and upload requests, retained up to 30 days for abuse prevention.

What we don't collect

  • We do not use third-party analytics, advertising, or session-replay tools.
  • We do not scan the contents of your files for marketing or ML training purposes.

How we use it

  • To provide the Service: authenticating you, storing your files, delivering share links.
  • To send transactional email: verification, password resets, and share notifications.
  • To prevent abuse: rate-limiting, fraud detection, and incident response.

Storage and security

Files are stored on disk under a path derived from internal IDs — never from user input — so that filenames cannot be used to escape the storage root. Passwords are hashed with BCrypt. Verification and reset tokens are stored as SHA-256 digests, so a database leak would not reveal valid tokens.

Sharing with third parties

We do not sell your data. We only share data with service providers strictly necessary for running the Service (for example, our transactional email provider). We may disclose data when legally required to do so.

Your rights

You can export or delete your files at any time from the Service. To delete your account or request a copy of your data, contact support@wannaverse.com.

Cookies

We use a single session cookie (JSESSIONID) and a CSRF cookie (XSRF-TOKEN). No advertising or tracking cookies are set.

Changes

We will announce material changes to this Policy in-app or by email.

Contact

Data-related questions: support@wannaverse.com.