Last updated: 5 October 2026
Direct transfers
Files sent between your devices go straight between them, over your own network. The apps keep a name for your device, your settings and a history list on your own device only. Other devices on the same network can see the device name you chose, so pick a name you are happy to show.
Finding nearby devices (the website)
To show you devices on the same network, the server sees the address your connection comes from and relays the device names of devices that share it. This is kept in memory only while you have the page open. The server stores nothing about your files.
Link and email shares
Files are encrypted on your device before upload. The server stores the encrypted data for 7 days and then deletes it. It cannot read the files, the file names or your message. The key stays in the link after the "#", which is never sent to the server. When you send by email, the recipient addresses and the link are used once to send the message and are not kept by us.
Email sign-in (only for "Send by email")
To stop strangers from using GleamShare to send spam, you must confirm your own email address before sending by email. Getting a link, or sending to nearby devices, never needs this.
- We email you a 6-digit code. The server keeps it, scrambled, for 10 minutes, then discards it.
- After you confirm it, your browser or app keeps a sign-in token that contains your email address and lasts 30 days. It is stored only on your device. We keep no list of users and no password.
- The email you send shows your confirmed address as the sender's reply address, so the recipient knows who it is from.
- "Sign out" in the app or website removes the token from your device.
Who else handles data
Emails (the sign-in code and the messages you send) are delivered through our mail provider, who has to see the addresses to deliver them. Our web host keeps ordinary server logs, such as the address a request came from and the time. We also use the connecting address briefly, in memory, to limit abuse such as too many emails in an hour.
No tracking, no selling
No advertising and no analytics cookies. We do not sell or share personal information.
Your choices
You can turn off "Show me on network" so nobody can find or send to you, sign out to remove your email from your device, and decline any incoming transfer. Encrypted link and email data is deleted automatically after 7 days. For anything else, contact us below.
Questions? Contact acaciawebmaster.