Privacy Policy

TextShareNow is designed to collect as little data as possible. Specifically:

• Text content you submit is temporarily stored only to fulfil the transfer request.
• Files you upload are temporarily stored only to fulfil the transfer request. Standard uploads are scanned for malware before becoming available. Private file mode encrypts the contents in your browser; we store ciphertext, never receive the key, and cannot scan the contents. File names, MIME types, sizes, and folder paths remain visible in both modes.
• The free plan accepts PNG, JPEG, WebP, MP4 and WebM files up to 10 MB. Pro accepts up to 20 files and 100 MB total per transfer (any non-executable file type, up to 100 MB per file), within a per-license storage allowance. Multi-file transfers also store the original file names and folder paths so the recipient can download them correctly.
• If you activate Pro, the license key you enter is stored in a signed, http-only cookie on your device for up to 30 days, and a SHA-256 hash of the key is cached on our servers for up to 24 hours so we do not have to contact Gumroad on every request. We send the key to Gumroad to verify the subscription. When you use the API or MCP server, the key is sent with each request and verified the same way.
• For Pro text shares, we keep a private receipt of event times (created, opened, read, and closed) so you can see how a share was accessed. Receipts do not include IP addresses, device data, or the shared text, are deleted 90 days after the share closes, and never-expiring shares keep a one-year receipt window.
• We do not ask for your name, phone number, or an account to use the tool. If you activate Pro, Gumroad returns the email address associated with the license; we cache it with the license check for up to 24 hours and never use it for marketing or share it.
• We may collect anonymised server metrics such as request counts and response times for performance monitoring.
• Standard web server logs (IP addresses, timestamps) may be retained for up to 7 days for security purposes. Security events such as repeated wrong-password attempts are logged for up to 7 days; those entries contain an event type, the share code, and a timestamp — never the content or IP addresses.

When you submit text through our Send feature, it is encrypted at rest with AES-256-GCM and stored with a time-to-live (TTL) you choose: 10 minutes, 30 minutes or 1 hour on the free plan; Pro shares can be set to 1 day, 7 days, 30 days, or never expire. If you enable Private mode (the “Encrypt Now” toggle), the text is encrypted in your browser with a key that never reaches our servers — we store only ciphertext we cannot decrypt. Standard shares are decrypted on our server only long enough to deliver them, then deleted according to the rules below.

When you upload a file, it is stored on a dedicated server. Free uploads use the same TTL choices: 10 minutes, 30 minutes or 1 hour. Pro uploads can be kept for 1 day, 7 days or 30 days. Standard uploads are scanned for malware using ClamAV before becoming available; files that fail the scan are deleted and never served. If you enable Private file mode, the contents are encrypted in your browser with AES-256-GCM before upload. We store only ciphertext and never receive the key, so we cannot read or scan the contents. File names, MIME types, sizes, and folder paths remain visible. Encrypted files are deleted after the recipient acknowledges decryption or when the timer ends.

Free text shares are deleted immediately upon their first successful retrieval. Pro shares can allow 5, 10, or unlimited reads and are deleted when their read limit is reached or their timer ends, whichever comes first. Standard files are deleted after their first successful download or when their timer ends. Private files are deleted after the recipient downloads and acknowledges decryption, or when their timer ends. Pro text shares set to never expire remain stored until their read limit is reached (if one applies) or until we remove them for a violation of our Terms; a Pro share with no expiry and unlimited reads remains stored indefinitely.

We do not archive or back up submitted text or uploaded files. Content is retained only as described above.

Executable files and installers (such as .exe, .msi, .bat, .cmd, .scr, .jar, .apk, .dmg, .deb and .rpm) are blocked on every plan, including Pro. Pro uploads are also subject to a live storage allowance per license.

TextShareNow sets no first-party cookies except the Pro session cookie described above. We use Google Analytics and Google AdSense, plus Vercel Analytics for aggregate traffic and event measurement. Pro payments are handled separately by Gumroad.

Analytics — we use Google Analytics 4 to measure aggregate, anonymised usage of this site: which pages are visited, which devices and languages are used, and how visitors arrive here.

We also use Vercel Analytics, which counts page views and anonymous events (such as which pricing button was clicked) without cookies or cross-site tracking. Pro checkout clicks are stored in our own database only as aggregate numbers — never linked to you or your license key.

Advertising — we have integrated Google AdSense on this site, which may display advertisements. Google, as a third-party vendor, and its advertising partners may use cookies, including the DoubleClick cookie, to serve ads based on a visitor's prior visits to this site or other sites on the internet.

Payments — Pro subscriptions are processed by Gumroad. When you check out, you interact directly with Gumroad's website and their privacy policy governs the payment information you provide there. We never receive or store your card details.

• Google Analytics event data is kept only for the retention period configured in our Analytics property (Google's default is 2 months).
• The lifetime of Google's advertising cookies is governed by Google's own cookie policy.
• Anonymous Pro checkout click counts are stored in aggregate form for up to 400 days.

You may also opt out of personalised advertising by visiting Google Ads Settings, www.aboutads.info.

To opt out of Google Analytics itself, see Google's Analytics opt-out browser add-on.

You can also disable cookies entirely through your browser settings, though this may affect functionality on other websites.

All data in transit is encrypted using HTTPS/TLS, with HSTS enabled. Stored text is encrypted at rest with AES-256-GCM. In Private mode the text is also encrypted in your browser with a key we never receive. Uploaded files are stored on a dedicated server with strict access controls and are never served as static files. In Private file mode the contents are browser-encrypted before upload; we store only ciphertext and never receive the key.

Passwords are never sent to us in plaintext: your browser derives them with PBKDF2-HMAC-SHA256 (210,000 iterations), and we store only the derived verifier. For Private-mode shares we store a SHA-256 hash of the passphrase mix, never the mix itself.

Standard uploads are automatically scanned for malware using ClamAV before becoming available for download; files that fail the scan are immediately deleted. Private file mode is end-to-end encrypted, so the server cannot scan the contents. Only open encrypted files from senders you trust.

We apply rate limiting to prevent brute-force enumeration of codes. Each code allows a limited number of retrieval attempts per IP address per minute. Password-protected shares also delete themselves after ten wrong password attempts within a short window.

We do not sell, rent, or share your submitted text or uploaded files with any third parties. Your content is used solely to fulfil your transfer request and is then deleted as described above.

Gumroad processes Pro subscription payments and license verification. Their privacy policy applies to the information you provide at checkout.

Google, through both Google Analytics and Google AdSense, may independently collect and process data as described in its own privacy policy.

Learn more at Google's Privacy & Terms.

If you are located in the European Economic Area or the United Kingdom, you have the right to request access to, correction of, or deletion of any personal data we hold about you, and the right to object to or restrict certain processing.

Because TextShareNow does not require accounts and deletes submitted content automatically after its last permitted read or when its timer ends, we generally do not hold personal data beyond short-lived server logs. Pro shares configured never to expire are retained until read (if a read limit applies) or removed for abuse. Any such request can be made using the contact details below.

If you are a California resident, you have the right to know what personal information is collected about you, to request deletion of that information, and to opt out of the sale of personal information. TextShareNow does not sell personal information to third parties.

TextShareNow is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has submitted content through our service, please contact us immediately so we can remove it.

We may update this privacy policy from time to time. Changes will be reflected by an updated date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.