Privacy
SentPad is operated by Compassline Ltd. This notice covers the Free public beta. Updated 29 October 2026.
Your pad stays on your devices
Text, URLs and images are stored in your browser using IndexedDB. SentPad does not upload them to an application content database or keep server backups. Content transfers over authenticated, encrypted WebRTC DataChannels. A TURN transport relay may carry encrypted packets when a direct connection is unavailable; this is not a promise that traffic never passes through servers.
Images are processed locally to validate, resize, compress and remove source metadata. We do not fetch link previews, use advertising trackers or collect content analytics.
Connection and infrastructure data
Our signalling service processes public device keys, device names, temporary pairing codes, IP/ICE addresses and signed connection messages in memory to connect your devices and prevent misuse. Application code does not log note or image content. Render hosts the application and Cloudflare provides transport infrastructure; these providers may process IP addresses, traffic/security records and operational metadata under their own retention and service policies. Their infrastructure can operate internationally.
We process connection and security metadata to provide the service and for our legitimate interests in reliability and preventing abuse. In-memory rate-limit records expire within their short operational windows; signalling records disappear on disconnect or expiry. We have no application database of Free customer accounts or pad contents. Infrastructure provider retention is separate from these in-memory records.
Local storage and deletion
Essential browser storage remembers your device key, paired devices, names, pad/history and application shell. Appearance preference is stored locally. There are no advertising cookies. Free items expire individually after seven days; cleanup runs when the browser can execute. A sleeping/offline device cannot erase storage immediately. Deletion reaches connected peers, or disconnected peers when they reconnect. It cannot erase copies already exported, copied or backed up elsewhere.
Both devices must be online for a new transfer. Clearing browser data removes that browser’s credentials and local pad; we cannot restore them. SentPad does not encrypt its local database at rest. Browser extensions, device compromise or malicious delivered code can access content. Pair only trusted devices and compare the full security code on both screens.
Contact and your rights
For privacy requests contact support@sentpad.com. We cannot retrieve or delete pad content from a server because we do not hold it. We can address personal information we do hold, such as support correspondence. We retain support messages only as needed to answer, resolve the issue and meet applicable obligations. Depending on applicable law, you may have rights of access, correction, deletion, restriction, objection and complaint to your data-protection authority.
Purchasing and Pro billing are disabled in this Free release. We will update the relevant disclosures before enabling paid features.