Privacy

ORBIT is built to know as little as possible about you.

Files

• Files are encrypted in your browser (AES-256-GCM) before upload. The key comes from your passcode and never leaves your device.
• We store only the encrypted bytes, and delete them after 30 minutes, after the download limit, or when the sender destroys them.

What we keep, briefly

• The name you give an object, its file name, size and type. These are visible to anyone on the site while it floats.
• A one-way hash of your network address, used for the Nearby tag and upload limits. Your IP address itself is not stored.
• A random device ID and a browser/OS label (e.g. "Chrome · Android") in your browser, so senders can see opens and downloads.
• Object data is deleted together with the object.

Usage statistics

To keep the service running we keep anonymous usage stats: your approximate location (country, city, coordinates rounded to about 1 km, derived by our host from your connection), browser, OS, device type, and when you visit, upload or download. Detailed events are kept for 30 days; daily totals longer. This is never linked to your name, never sold and never shared.

No accounts, no ads

There are no accounts, no ads and no third-party trackers. Hosting is provided by Vercel and Supabase.

Tip

Don't put sensitive information in the object name. Only the contents are encrypted.