Trust, security & privacy at Senderly
Everything we publish about how Senderly protects your files and your data — in one place. Built privacy-first: your files are end-to-end encrypted and we keep as little as possible.
How we handle your data
Three commitments that shape every part of Senderly.
Encrypted by default
Files are end-to-end encrypted on your device. We can't read their contents or file names — only people with the link (and password, if set) can.
Data minimisation
We collect the minimum needed to run the Service. No ads, no tracking cookies, no selling your data.
Gone when it should be
Transfers self-destruct or expire automatically. Delete your account and your data is permanently removed.
Policy & document library
The full set of legal and security documents.
Privacy PolicyPublic
What we collect, why, and your rights.
Terms of ServicePublic
The agreement between you and Senderly.
Cookie PolicyPublic
Essential cookies only — no ads or tracking.
Acceptable UsePublic
What's not allowed on Senderly.
Security OverviewPublic
How we protect the Service and your data.
Policy ChangelogPublic
What changed in our policies, and when.
Security at a glance
A short summary — the full detail lives in the Security Overview.
- End-to-end encryption so file contents never reach us in the clear
- Encrypted storage on Cloudflare R2 with automatic deletion at expiry
- Bot protection via Cloudflare Turnstile, without tracking you
- A responsible-disclosure channel for security researchers
Read the Security Overview
Encryption, access control, monitoring, and breach response — in detail.
Compliance
Where we are today. We're transparent about what's in place.
Singapore PDPA
We handle personal data in line with Singapore's Personal Data Protection Act.
GDPR-aligned
We follow GDPR principles for users in the EU/UK where it applies.
Procurement & security questions
Can you read my files?
No. Files are end-to-end encrypted on your device before upload. We store only encrypted blobs and can't decrypt them.
Where is data stored?
Encrypted files are stored on Cloudflare R2. See our Privacy Policy for the full list of providers.
How long do you keep files?
Transfers are deleted automatically at expiry or after a self-destruct download. We don't keep copies.
How do I report a security issue?
Email our security team at security@senderly.me. See the Security Overview for our responsible-disclosure process.