Files never reach our servers

Your files travel device-to-device via WebRTC. Handlane's servers only help your devices discover each other — they never see, store, or proxy file contents.

What we do collect

• Account: your Google email and display name when you sign in.
• Sessions: a temporary session id, device type, and duration so we can enforce the per-plan quota.
• Billing: a Lemon Squeezy customer id and subscription state when you subscribe.
• Logs: standard request logs with peppered IP hashes, retained for 30 days for abuse detection.

What we never collect

• File names, file contents, or transfer history.
• Recipient identities — we don't know who you shared with.
• Browsing history outside Handlane.
• Anything for advertising, profiling, or resale.

End-to-end keys

Session encryption keys live in the URL fragment (the part after the # symbol). Browsers do not send URL fragments to servers, so only your own devices ever see them.

Cookies & local storage

• A session cookie (HttpOnly, Secure, SameSite) keeps you signed in.
• Local storage remembers your language and theme preferences.
• No analytics, advertising, or third-party tracking cookies.

Third-party services

• Google OAuth — sign-in only. Google receives your sign-in click.
• Lemon Squeezy — handles payments. Receives your name, email, and payment method.
• Cloudflare — hosts the website, signal worker, and database. Sees standard request metadata.

Each provider receives only the minimum data their service needs to function.

Subscriptions & payments

We never see your card number. Lemon Squeezy is the merchant of record — receipts, refunds, and chargebacks all flow through them. You can manage your subscription anytime from the Account page.

Your rights

• Access: download everything we hold about you from Account → Export.
• Delete: wipe your account permanently from Account → Delete account.
• Correct: update your name or email any time from Account settings.

Data retention

• Account data: kept until you delete your account.
• Session metadata: 90 days.
• Request logs: 30 days.
• Admin audit logs: 365 days.

Security

All traffic uses HTTPS/TLS. Webhooks are verified with HMAC-SHA256. Sessions are signed with a server-side secret. We can't promise perfect security — no service can — but we apply the standard protections you'd expect.

Children

Handlane is not intended for children under 13. We do not knowingly collect personal information from anyone in that age group.

Changes to this policy

When we update this policy, the date at the top changes and signed-in users receive an email summary of what changed.