Privacy notice

Controller and contact

The controller is DropToPhone, operated at webpaginamaken.nl. Privacy questions and rights requests can be sent to privacy@webpaginamaken.nl.

Data we process

• Temporary session tokens, an eight-digit pairing code and connection timestamps.
• Your locally generated device identifier, device type and the name shown to the other device.
• WebRTC signaling data, including network candidates that can contain IP addresses.
• Abuse-prevention keys and ordinary infrastructure security logs.
• File names, sizes and transfer history stored only in your browser.

File content

File bytes use encrypted WebRTC transport. They travel directly when the networks permit it. A configured TURN provider may relay the encrypted traffic when a direct route is blocked. DropToPhone does not intentionally retain file content on its application server.

Purpose, basis and retention

Pairing and signaling are processed to provide the transfer you request. Rate limiting and security logs support our legitimate interest in keeping the service reliable and preventing abuse. Sessions expire after 30 minutes, signaling queues after about 45 seconds of inactivity and rate-limit buckets after no more than 10 minutes. Infrastructure providers may keep security logs under their own documented retention schedules.

Local storage and cookies

DropToPhone uses browser local storage for a random device identifier, an optional device name and up to 25 completed transfer records. These items are necessary for continuity and are not used for advertising. We do not set analytics or advertising cookies and we do not sell or share personal information for cross-context behavioral advertising.

Providers and international transfers

Hosting/CDN providers and the configured STUN or TURN operator process the limited connection data needed for their services. Their location and contractual safeguards determine whether an international transfer occurs.

California disclosures

In the preceding 12 months, the service may have processed identifiers, internet activity and file metadata for the operational purposes described above. These categories come from your browser and network connection. We do not sell personal information, share it for cross-context behavioral advertising, use sensitive personal information to infer characteristics, or offer financial incentives. California residents may request access, correction or deletion without discriminatory treatment; an authorized agent may submit a verifiable request using the privacy contact. Because no sale or sharing occurs, Global Privacy Control does not need to change the service's behavior.

Your rights

Depending on where you live, you may request access, correction, deletion, restriction, objection or portability, and may complain to your supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens. Because DropToPhone has no accounts, we may be unable to link anonymous session data to you after it expires.

Children

The service is a general-audience utility and is not directed to children under 13. Do not use it to send content when you do not have authority to do so.