FILETRIP.NET
Send files. Downloaded once, then gone.
Privacy policy
Last updated 9 September 2026
Filetrip.net is a temporary file transfer service. There is no account, no sign-up, and no cookie. This page describes exactly what the service stores, for how long, and who else gets to see it.
1. The files you send
When you upload, your files are written to a private directory on the server under a random 22-character address that cannot be guessed or enumerated. Alongside them we record the file names, their sizes, how many there are, and the moment the upload expires. The contents are never read, scanned, indexed or analysed.
Everything is erased as soon as the recipient's browser confirms it received the files in full, or after 24 hours if nobody downloads them, or immediately if you delete the upload yourself. Erasure is final: there is no backup, no recycle bin, and no way to recover an upload once it is gone.
2. Cookies and tracking
There are none. The site sets no cookie, runs no analytics, and loads no third-party script, font or CDN asset of any kind. Every page is served in a single round trip from this server alone. Even the QR code on the sharing page is generated on the server and embedded directly in the page, so displaying it calls nobody.
3. Web server logs
Every request made to the transfer service is recorded in a server log: your IP address, the date and time, the URL requested, your browser's user agent and the page you came from.
These logs are kept for one year, then deleted automatically. That duration is not a choice. French law requires anyone who hosts content supplied by others to retain the data that would identify whoever put it online: article 6-II of the LCEN, and decree no. 2021-1362 of 20 October 2021, which sets the period at one year. Keeping them for less would breach that obligation; keeping them for longer would breach the GDPR, which forbids holding personal data beyond what is necessary.
They are never used for analytics, profiling or measuring an audience. They are read only to keep the service running and to deal with abuse, and they are disclosed to nobody except a judicial or administrative authority making a request that the law obliges us to answer.
4. Activity journal
Because an upload is erased completely — directory, names, sizes and all — a separate journal records one line when an upload arrives and one line when it disappears: the time, the random address, the file names and their sizes. It is what makes it possible to notice abuse of the service after the fact. It contains no file contents, no IP address and nothing that identifies the sender, and it is kept for 12 months.
5. After an upload is gone
A small marker is kept for 48 hours recording that an upload ended and whether it was downloaded, expired, or deleted by its sender. It is what lets your own upload page still answer « did my file arrive? » the next day. It holds no file name and no content.
6. Short links
If you create a six-digit short link, that code and the address it points to are stored until the upload disappears, then deleted with it. Six digits is a million combinations: enough to read out over the phone, not enough to resist someone trying them in bulk. A short link is a convenience, never a protection.
7. Who else is involved
- OVH SAS (Roubaix, France) hosts the server, and therefore holds everything described above on its disks.
- Cloudflare, Inc. sits in front of the site as a reverse proxy. It sees the IP address and the URL of every request you make, and applies its own privacy policy to them.
- Telegram carries a short daily summary to the site operator: how many uploads there were, their file names, their sizes, and whether each one was downloaded, expired or was deleted. Never their contents. That summary is how the operator checks that the service is not being put to illegitimate use. If it turns out that it is, the answer will be increasingly severe restrictions on what can be sent — and, if that is not enough, closing the site permanently.
Nothing is sold, rented or handed to advertisers, for the simple reason that nothing here is collected for that purpose.
8. What a download link gives away
Anyone holding the link can download the files, once. They are not encrypted end to end: they sit readable on the server until they are erased, which means the operator is technically able to open them, and does not. Send the link only to the person you mean to, and treat this service as a convenient courier rather than as a safe.
9. Your rights
The service is operated from France and follows the GDPR. You have the right to access, rectify or erase personal data concerning you, to restrict or object to its processing, and to lodge a complaint with the CNIL. In practice most of that happens on its own: uploads erase themselves within 24 hours and nothing ties one to your identity. For anything else, write to [email protected]. The server logs of section 3 are held under a legal obligation and cannot be erased on request before their year is up; the activity journal of section 4 is held under the legitimate interest in keeping a free service available and free of abuse.
10. Changes
If this policy changes, the date at the top of this page changes with it. See also the legal notice.