Introduction
CrossDoc is a temporary file-sharing service that helps you move documents between devices without requiring an account. This Privacy Policy explains what information we process when you use CrossDoc, why we process it, and the choices and responsibilities that apply.
CrossDoc is operated by an operator whose identity and other contact details are still being finalized. Please see the Contact section for the current support and privacy contact.
Information We Collect
When you upload a file, CrossDoc may process the uploaded filename, file type, size, other file metadata, file contents, upload and download timestamps, expiry and claim status.
Our infrastructure providers may also process technical information needed to operate and protect the service, such as request information, device and browser details, and diagnostic logs. IP addresses may be processed for rate limiting, abuse prevention, and security.
How We Use Information
We use information to provide file transfers, generate and validate share links, process one-time download claims, prevent abuse and unauthorized use, enforce rate limits, troubleshoot service issues, and automatically clean up expired or claimed files and related data.
File Storage and Security
Uploaded files are stored in a private Supabase Storage bucket. Share tokens are hashed in the database. When a download is claimed, CrossDoc provides a time-limited signed URL to retrieve the private file.
These measures are designed to reduce unnecessary exposure, but no online service can guarantee absolute security. CrossDoc does not claim to provide end-to-end encryption.
File Retention and Deletion
Files expire according to their configured expiry time. Once a file has been successfully claimed, it becomes eligible for cleanup after 10 minutes. Automated cleanup runs hourly, so actual deletion may be delayed after a file becomes eligible.
Database metadata, such as transfer status, timestamps, and token hashes, may remain after the storage file is deleted when needed for security, auditing, or operational purposes.
Third-Party Services
CrossDoc uses Supabase for its database, private storage, and Edge Functions, and Vercel for hosting. These providers may process information on our behalf and their own privacy policies and terms also apply to their services.
Your Responsibilities and Rights
You are responsible for using CrossDoc lawfully and for protecting any share links you create. If you have a privacy question, believe information has been handled improperly, or want to raise a data concern, contact the operator at crossdoc.support@gmail.com. Requests are handled subject to applicable law and reasonable verification requirements.
Changes to This Policy
We may update this Privacy Policy as CrossDoc changes or as legal requirements develop. Updated versions will be published at this URL with a revised “Last updated” date. Your continued use of the service after an update means the revised policy applies to future use, subject to applicable law.
Contact
For privacy questions and data concerns, contact crossdoc.support@gmail.com.