🛡️ Privacy Policy

Responsible:
Christoph Beth
Steinbeker Str.12
20537 Hamburg
Germany
Email: info@webxserver.de

Service Description:
This website offers a secure transmission service for text and files.
User-provided content is encrypted before storage using AES-256 encryption.
Optionally, access can be protected by a password defined by the user.

The encrypted data is stored temporarily and automatically deleted after:
- successful retrieval (one-time download), or
- expiration of the storage period (maximum 5 hours)

No permanent storage of transmitted content takes place.

Processing of Personal Data:
When using this service, the following data may be processed:
- Entered text content
- Uploaded files
- IP address (temporarily, for technical delivery and abuse prevention)

The data is processed solely for the purpose of providing the secure transfer service.

Encryption and Security:
All transmitted content is encrypted before storage.
Access to the stored data is only possible via a unique tokenized link.
If a password is set, it is stored only as a secure hash.

Use of the IP Address:
The IP address may be processed temporarily for:
- establishing the connection
- preventing abuse (e.g. brute-force protection)

Additionally, IP data may be transmitted to the external service ip-api.com
to display approximate location information (country, city, ISP).
This data is not stored by this website.

Cookies / Session Storage:
This website may use temporary session cookies to:
- manage password authentication
- prevent repeated unauthorized access attempts

These cookies:
- do not contain personal data
- are automatically deleted after the session ends

User Rights:
You have the right to:
- request information about your data
- request correction or deletion
- restrict processing

Since stored data is encrypted and anonymous (token-based),
direct identification is generally not possible.

To exercise your rights, please contact:
info@webxserver.de

External Services:
This website uses the external service ip-api.com
for location-based information.

Further information can be found in their privacy policy.

Legal Basis:
Processing is carried out in accordance with Art. 6(1)(b) GDPR
(contractual necessity) and Art. 6(1)(f) GDPR (legitimate interest in secure operation).

Further information ip-api:
Further information on data processing can be found in the complete privacy policy of the external service ip-api.com under their legal notices.