Scope
This policy applies to the One Copy website (1copy.app) and the One Copy iOS app. By using One Copy, you acknowledge this policy. If you do not agree, do not use the service.
Data we process
One Copy does not require an account. Text, filenames, and file contents are encrypted on your device before transmission. The server receives ciphertext, randomly generated file identifiers, timestamps, and technical information needed to deliver the service. Your room code and the decryption key derived from it are never sent to the server.
- Network and operational data: Cloudflare may process IP addresses, request metadata, and browser or device information to provide connectivity, security, and troubleshooting.
- Optional website analytics: the website loads Google Analytics only after you explicitly consent. It may process pseudonymous page-view and session data, approximate location, browser and device information, and a first-party identifier. We do not send room codes, transferred content, or filenames to analytics. The iOS app does not include the Google Analytics SDK.
- Device permissions: the app accesses only photos or files you deliberately select. Clipboard content is processed only when you choose to paste, copy, or send it.
Why we process data
We process this data only to provide encrypted cross-device transfer, maintain real-time connections, prevent abuse, protect the service, diagnose failures, and—with consent—understand aggregate use of website features. We do not sell personal information or use transferred content for advertising or profiling.
Retention and deletion
- Encrypted files normally expire 30 minutes after upload and may be deleted sooner when the last device confirms that it is leaving and destroying the room.
- A room keeps at most 200 messages. Inactive rooms are reclaimed after no more than six hours; confirming departure from the last connected device destroys room content immediately.
- Your analytics choice remains in local browser storage until you change it or clear browser data. Google Analytics and Cloudflare retain logs according to their configurations and policies.
- Temporary decrypted copies created by the iOS app for previews or opening files are cleared when you leave a room; the operating system may also clear temporary files under its storage-management rules.
Service providers
Cloudflare provides networking, security, server execution, and temporary object storage. Google Analytics is used only when you consent to website analytics. These providers may process technical data in the regions where they operate.
Your choices and rights
You can decline website analytics and withdraw consent at any time through Analytics preferences in the page footer. You can also leave and destroy a room when yours is the last device, clear local browser data, or stop using the service. Because One Copy has no accounts and the operator does not possess room codes or decryption keys, we generally cannot identify who owns a room or read, recover, or locate its data by content. Applicable law may give you rights to access, correct, delete, restrict, or object to processing.
Security and limitations
We use encryption capabilities provided by browsers and operating systems and take reasonable technical and organizational measures to protect the service. No internet transmission can be guaranteed completely secure. Use a unique, hard-to-guess room code, share links through a trusted channel, and keep your device and browser secure.
Children's privacy
One Copy is a general-audience service and is not directed specifically to children. We do not knowingly ask children to provide personal information. If you believe a child has provided personal information without appropriate consent, contact us using the channel below.
Changes and contact
We may update this policy when the product, law, or service providers change and will post a new effective date here. For privacy questions or rights requests, use the developer support channel shown on the app-store page where you obtained the app, or visit 1copy.app for the latest contact information.