Privacy
Last updated November 11, 2026
Short version: we can't see your files, we don't know who you are, and we don't track you.
Files you send by link
Before anything is uploaded, your browser or the Slingshot app encrypts your files and their names with a random key made on your device. That key is only in the part of the link after the # sign. Browsers never send that part to any server, so we never have it and can't unlock your files.
What we store while a link is active:
| What | Why | How long |
|---|---|---|
| The encrypted (scrambled) data | So the person you send it to can download it | Until the link expires, is used up or you delete it. Then it's erased, normally within minutes and at the latest 8 days after upload. |
| Size, expiry time, download count, upload time | To run the link | Same as above |
| Reports someone made about a link | To deal with abuse | Deleted with the link |
We don't store file names, file types, or anything that identifies you.
Limits and your IP address
To stop one person from using up the free storage, we count uploads per visitor per day. We don't keep your IP address for this. We keep a one-way scrambled code made from your IP address and a secret that changes every day, so it can't be turned back into your address or linked across days. These counters are deleted after 2 days.
Sending to nearby computers (desktop app)
When you send to a computer on the same network, files go straight from one computer to the other, encrypted. They never go through our servers. The app shows your computer's name to other Slingshot apps on the same network so they can find you. You can change that name in the app's settings.
No accounts, cookies, ads or analytics
There are no accounts, no tracking cookies, no ads, no analytics and no third-party scripts on this website. The website saves your own recent links in your browser's storage, only on your device, so you can copy or delete them later. Clearing your browser data removes them.
The desktop app has no tracking. It may check this website for a newer version, which works like visiting a web page.
Our hosting provider
Slingshot runs on Cloudflare. Like any web host, Cloudflare handles your connection, so it sees your IP address and may keep short-lived technical logs to keep the service secure. See Cloudflare's privacy policy.
Donations
The Donate button takes you to Ko-fi. If you donate, Ko-fi and its payment partners handle it under their own privacy policies. We only see what Ko-fi shows us about a donation.
Contact
Questions or requests: slingshotransfers@protonmail.com