Privacy Policy

Last updated: May 2026

Who we are

Things I Forward Once ("tifo", "we", "us") is an ephemeral sharing service at ti.fo. We have no named operator and no registered company — this is a minimal public utility.

What we collect

We collect as little as possible:

  • Content you share. Pastes, code snippets, images, notes, polls, shortened links, and file uploads are stored on our servers for the duration you choose (from one hour to one month), then permanently deleted. File drops and secrets are deleted immediately after the first access.
  • Anonymized usage events. When content is created or accessed we record the action type (e.g. "paste created"), the file size for uploads, and the date — nothing else. No IP address, no browser fingerprint, no user agent, no session identifier.
  • Theme preference. If you toggle dark mode, your preference is saved in your browser's localStorage. It never leaves your device.

We do not use cookies, tracking pixels, advertising networks, or third-party analytics SDKs.

Secrets

One-time secrets are encrypted in your browser using AES-GCM before being sent to us. The decryption key is part of the URL fragment and is never transmitted to our servers. We are technically unable to read your secrets.

Third parties

We use Bunny.net for infrastructure (hosting, CDN, and database). Your content transits and is stored on their servers. No other third parties receive your data.

Data retention

  • Content is deleted at the expiry time you chose, or on first access for one-time items.
  • Aggregated, anonymous event counts (totals and daily tallies) are kept indefinitely to power the public analytics dashboard.

Your rights

Because we do not collect personal data, most data-subject rights (access, rectification, erasure) are automatically satisfied — there is nothing to hand over or delete. If you believe we hold something that identifies you, contact us and we will investigate.

Users in the EU/EEA may have additional rights under GDPR. Users in California may have rights under CCPA. Contact us at the address below to exercise any right.

Children

This service is not directed at children under 13. We do not knowingly collect any information from children under 13. If you are under 13, please do not use this service.

Changes

If we make material changes to this policy we will update the date above. The current version is always at /privacy.

Contact

Questions or requests: privacy@betas.dev