Privacy Policy
Last updated 14 October 2026
In short: no account, no ads, no tracking. Your files are deleted when the link expires. We keep a little technical data to stop abuse, and erase IP addresses after 90 days.
Who we are
BeamUpload is run by BeamUpload, which is responsible for your data (the “controller”). Contact: [email protected].
What we collect and why
- Your files, to deliver them to the people you share the link with. They are sent over encrypted connections, checked automatically for viruses, and fingerprinted (a SHA-256 hash) so known harmful files can be blocked. We don’t look at your files unless they are reported to us or the law requires it.
- Transfer details: file names and sizes, expiry date, number of downloads, and a scrambled (hashed) version of the password if you set one.
- Technical data: IP address, browser type and country when files are uploaded, downloaded or reported. We use it to prevent abuse, apply upload limits and answer legal requests.
- Reports you send us about a transfer.
- On your device: your browser remembers “Your transfers” (including their private management links) on that device only, and a cookie remembers your language. We use no advertising or analytics cookies.
We use this data to provide the service you ask for, and because we have a legitimate interest in keeping it safe and free of abuse (GDPR Art. 6(1)(b) and (f)), or when the law requires it (Art. 6(1)(c)).
How long we keep it
- Files: until the transfer expires or is deleted, then they are removed within minutes.
- IP addresses and browser details: 90 days. After that we keep only a one-way hash, so repeated abuse can still be recognised.
- Transfer details and reports: kept after the files are gone, to handle abuse reports and legal requests.
- Database backups: up to 30 days.
Who else handles it
- Cloudflare: network, file storage, downloads and the bot check on uploads.
- OVHcloud: the servers that run the website and database.
They process data only on our behalf. Where data leaves the EU, it is protected by safeguards such as the EU Standard Contractual Clauses. We never sell your data, and we share it with authorities only when the law requires us to.
Your rights
You can ask to see, correct or delete your data, or object to how we use it, by emailing [email protected]. You can delete a transfer yourself at any time from its management link. You also have the right to complain to your local data protection authority.
Children
BeamUpload is not meant for children under 16.
Changes
If this policy changes, we’ll update the date at the top. See also our Terms of Service.