ShareBold Privacy Policy & Data Disclosures

Last Updated: October 5, 2026 • Effective Date: January 1, 2026

At ShareBold (accessible from https://sharebold.com), your privacy is one of our primary priorities. This Privacy Policy document outlines the types of information collected and recorded by ShareBold, how we use it, and your rights concerning your personal data. We operate on principles of data minimization: we do not sell your personal data, we do not inspect the contents of your uploaded files, and we enforce automated data expiration to permanently purge files after transmission.

1. What Information ShareBold Collects

We collect only the minimum technical and operational information necessary to deliver high-speed, secure file transfers, prevent system abuse, and maintain service reliability:

• Anonymous Transfer Metadata: File name, file size in bytes, MIME content type, creation timestamp, and selected expiration duration.
• Network and Technical Data: Internet Protocol (IP) address, browser user-agent string, operating system version, referring URLs, and request timestamps.
• Account Identifiers (Optional): If you authenticate via Google Sign-In or create an account, we store your full name, verified email address, profile picture URL, and system user ID.
• Transaction Records (For Pro Subscriptions): Transaction identifiers, subscription status, billing currency, and payment timestamps.

2. Cookies and Local Browser Storage

ShareBold uses cookies and modern browser storage (localStorage and sessionStorage) to enhance your user experience, maintain session continuity, and deliver relevant advertisements.

• Essential & Session Cookies: Required to keep you logged into your account, process active uploads, and maintain security challenge integrity.
• Preference Storage: Saves your chosen interface theme (dark mode vs. light mode) and recently viewed transfer history on your local device.
• Analytics Cookies: Help us measure aggregated traffic trends, page loading performance, and error frequencies.
• Advertising Cookies (Google AdSense & Partners): Used by third-party advertising vendors to serve non-intrusive advertisements across our platform and informational web pages.

You can choose to disable cookies through your individual browser options (Chrome, Safari, Firefox, Edge). Please note that disabling essential cookies may affect active transfers.

3. IP Addresses and Server Access Logs

Like most modern web platforms, ShareBold follows a standard procedure of utilizing log files. These files log visitors when they access our web services. The information collected includes IP addresses, browser type, ISP, timestamps, and referring pages. This data is processed strictly for preventing automated brute-force attacks against 4-digit PIN codes via rate-limiting, mitigating DDoS attacks, diagnosing server latency, and complying with DMCA copyright notices. Server access logs are automatically rotated and permanently purged after thirty (30) days.

4. Uploaded Files and Content Privacy

Your uploaded files are treated as confidential, sealed digital parcels. We maintain an uncompromising stance on file privacy:

• No Content Inspection: We never open, view, analyze, transcode, or mine the contents of your files. We do not use user files to train artificial intelligence or machine learning models.
• Encryption in Transit: All file uploads and downloads are strictly encrypted using TLS 1.3 transport security (AES-256-GCM / ChaCha20-Poly1305).
• Encryption at Rest: Binary chunks stored on our distributed MinIO/S3 object storage clusters are protected with enterprise-grade AES-256 block encryption.
• Access Restrictions: Files are accessible only to individuals who possess the unique short link, 4-digit pairing code, and (if enabled) the secret 4-digit security PIN.
• Automated Purging: When your chosen expiration window elapses (from 1 hour to 7 days), our background scavenger permanently wipes the file blocks from physical storage. Unrecoverable cryptographic shredding ensures zero lingering data exposure.

5. Account Information

Using ShareBold for everyday file transfers does not require an account. Users who choose to authenticate via Google Sign-In or subscribe to Pro provide their Google ID, verified email address, full name, and avatar URL via Google OAuth 2.0. We never receive or store your Google account password. You can update your profile information or delete your account at any time from your Profile Settings.

6. Payment Information and Billing Security

When you purchase a ShareBold Pro subscription, transactions are handled by certified third-party payment gateways (Razorpay, Cashfree Payments, PayPal). ShareBold servers never receive, store, or process raw credit card numbers or CVV codes. All payment processing is securely tokenized and handled directly on PCI-DSS Level 1 compliant infrastructure.

7. Analytics and Traffic Measurement

We use aggregated analytics tools (Google Analytics and internal counters) to understand how visitors interact with ShareBold. These tools collect non-personally identifiable information such as pages visited, duration, approximate geographic region (country/city level, never GPS), and device categories. You can opt out of Google Analytics tracking at any time using the Google Analytics Opt-out Browser Add-on.

8. Advertising and Google AdSense Disclosures

To provide high-capacity file transfers free of charge, ShareBold partners with third-party advertising networks, including Google AdSense. Google and its certified partners use advertising cookies to serve relevant ads based on user visits to ShareBold and other sites across the web. Users may opt out of personalized advertising by visiting Google Ads Settings (https://adssettings.google.com/) or aboutads.info. For more details, consult the Google Ad and Content Network Privacy Policy.

9. Third-Party Service Providers

We employ trusted third-party providers strictly to facilitate our service operations:

• Cloud Infrastructure & Storage: Distributed MinIO clusters and AWS S3 storage for encrypted binary chunk storage.
• Authentication Services: Google Identity Services (OAuth 2.0).
• Payment Processors: Razorpay, Cashfree Payments, and PayPal.
• Transactional Email Services: Resend API for delivering account notifications and receipt emails.
• Advertising & Analytics: Google AdSense and Google Analytics.

10. Data Retention and Automated Deletion Schedules

• Uploaded Files: Automatically and permanently purged when the user-selected expiration timer expires (between 1 hour and 7 days). Once purged, files cannot be recovered.
• Server Access Logs: Automatically overwritten and deleted after thirty (30) days.
• Registered User Accounts: Maintained until the user initiates account deletion.
• Financial Accounting Records: Retained for statutory periods mandated by commercial tax laws (typically 5 to 7 years).

11. User Rights Under GDPR, CCPA, and Global Privacy Laws

Regardless of your country of residence, you have full control over your personal data:

• GDPR Rights: Right of Access, Rectification, Erasure ("Right to be Forgotten"), Restriction of Processing, and Data Portability.
• CCPA / CPRA Rights: Right to Know, Right to Delete, Right to Opt-Out of sale/sharing, and Right to Non-Discrimination.

To exercise any of these rights, contact our Data Protection Officer at privacy@sharebold.com. We respond within thirty (30) days.

12. Contact Information & Data Protection Officer

If you have questions, comments, or concerns regarding this Privacy Policy, or if you wish to exercise your legal data rights, contact our privacy compliance team: