Privacy Policy

What CtrlCV Does

CtrlCV lets users share text and files between devices without creating an account. Sessions are temporary.

Messages and Files

Messages and files are encrypted in your browser before upload. The server stores encrypted message content, encrypted file blobs, and minimal metadata such as session id, file id, file size, MIME type, creation time, and expiration time.

The encryption key is not stored on the server. If you lose the session code or encryption key, the service cannot recover your messages or files.

Retention

Sessions, messages, and uploaded files are intended to expire after about 2 hours. Expired uploads are removed during cleanup when the service handles related API requests. Orphaned encrypted upload files may also be removed after they become old enough.

Usage Statistics

CtrlCV may store anonymous usage events and daily aggregate counts, such as sessions created, messages sent, files uploaded, uploaded byte totals, and API errors. Message content, file contents, raw session codes, IP addresses, and user-agent strings are not stored for analytics.

Security Notes

Do not upload sensitive, illegal, or private information unless you understand the risks. Use the QR link or share both the session code and encryption key only with people you trust.