Privacy Policy

1. Client-Side Execution & Zero-Log Architecture

CoShareX is architected under a strict non-custodial privacy model. All computations, text formatting, syntax validation, file packetization, and cryptographic functions occur entirely in your local browser tab.

We do not request, process, or store your personal files, snippets, pastes, logs, or formatted arrays on our servers. When you paste raw text or drop a file in our interface, that data resides strictly in temporary memory scopes allocated to your browser thread. Since no central database holds your data, your files and documents are physically immune to server breaches or administrator monitoring. Use of our services is also governed by our Terms of Service.

2. Peer-to-Peer WebRTC Data & Signaling

Our File Share utility utilizes browser-level WebRTC DataChannels to perform direct file streams between users. To connect two devices, an initial coordinate handshake is required. We maintain temporary signaling nodes solely to broker this initial handshake (exchanging SDP configurations and trickle ICE candidates).

Once signaling completes and the WebRTC channel is active, the signaling nodes disconnect from the transfer loop. The data stream moves directly from browser to browser, protected by End-to-End Encryption (using DTLS and SRTP protocols). No file packets ever traverse or touch our servers, meaning we have zero knowledge of the files being transferred.

3. Local Device Cache & Storage APIs

To provide performance optimizations and local history tools without storing user data on our servers, CoShareX utilizes browser-native client storage APIs:

• localStorage: Used to maintain local settings, recent formatting preferences, and client-side history lists of your pastes or file transfers.
• sessionStorage: Used to hold volatile decryption keys or connection states that should be deleted immediately when the browser tab is closed.
• IndexedDB: Used by offline compilers, WebAssembly modules, and image sandboxes to cache runtime packages for fast subsequent page loads.

All browser storage variables are tied to your specific browser profile. CoShareX servers have no access to these local parameters. You can clear this data at any time via your browser settings.

4. Subdomain-Specific Cookie & Storage Policies

We maintain distinct subdomains for our core developer utilities to ensure strict security boundaries (Same-Origin Policy). The cookie configurations of our subdomains are detailed below:

5. Cookie Usage & Google AdSense Disclosures

To support the ongoing hosting and development costs of CoShareX, we may place third-party ads on our main platform pages using Google AdSense. Google and other third-party vendors use cookies to serve personalized advertisements based on a user's previous visits to CoShareX and other sites across the internet. Google's use of advertising cookies enables it and its partners to serve ads based on user behavior.

These cookies do not contain, nor are they linked to, any of the private data processed inside our client-side sandboxes. For more information on how Google manages data in its ad products, please visit How Google uses information from sites or apps that use our services.

6. Advertising Opt-Out & Preferences

You have complete control over how advertising networks track your online activities. You can opt out of personalized advertising from Google by visiting the Google Ads Settings page.

Additionally, you can opt out of a third-party vendor's use of cookies for interest-based advertising by visiting the AboutAds Choices portal or the Network Advertising Initiative (NAI) opt-out configurations.

7. Contact & Support Data Collection

When you contact us directly via email (such as sending a message to support@cosharex.com), we receive your email address and any information you choose to include in your message. We use this information solely to process your support request, respond to your inquiries, and troubleshoot technical issues. We do not use this support-related contact data for marketing purposes, nor do we sell, rent, or distribute it to third parties.

8. Children's Privacy (COPPA Compliance)

Our website and developer utilities are not directed to children under the age of 13. CoShareX does not knowingly collect, request, or maintain personal identifiable information from children under 13. In the event that we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe we might have any information from or about a child under 13, please contact us at support@cosharex.com.

9. International Regulatory Compliance (GDPR & CCPA)

CoShareX is designed to comply natively with global privacy regulations, including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Because our utilities execute locally on your machine and do not store or transmit readable personal information to our servers, we do not compile databases of user identities. Since we have no access to your files or text strings, your right to erase, inspect, or retrieve data is fulfilled automatically—you hold sole custody and can modify or delete your browser cache at any time.

10. Privacy & Policy Inquiries

If you have security disclosures or compliance questions regarding our client-side data handling processes, please reach out to our team directly at support@cosharex.com.