Privacy Policy

The short version

No Wire Connect is a file-transfer bridge. You create a bridge, scan a QR code with your other device, and move files and short messages between them. There is no account and we do not collect personal information to use the service.

Files travel one of two ways: through the bridge (temporarily stored on Cloudflare R2 until the bridge ends) or, when both devices are on the same network, directly from one device to the other (never uploaded). The app labels every transfer "cloud" or "direct" so you always know which path was used.

Who we are

No Wire Connect is operated by Digital Spread, Morocco. Questions about this policy go to contact@nowireconnect.com.

What we store about a bridge

When you create a bridge, our database stores a random bridge ID, a 6-character code, the bridge status, its start and expiry time, and - for each device that joins - a random device secret stored as a hash. The device secret is what proves a device belongs to that bridge; we never see the secret itself.

For each file sent through the bridge we store its name, size, type, which side sent it ("host" or "peer") and the time. The file bytes themselves live on Cloudflare R2, not in the database (see "How files are handled").

Text messages sent in a bridge are stored with the bridge, with the sender side and time.

To limit abuse (creating very many bridges, or guessing bridge codes), our server keeps a one-way hash of the requesting IP address in a counter for up to two hours. The IP address itself is not stored.

Bridges are linked only by their ID. Nothing links a bridge to a person, because we never collect an identity.

How files are handled

This applies to the website and the extension alike.

• Cloud transfers (through the bridge): the sending device uploads the file to Cloudflare R2, our file-storage processor, through a short-lived upload link (valid for 15 minutes) issued by our server only to a device that has joined the bridge. Downloads use a similar link valid for 5 minutes, again only issued to devices in that bridge. Files up to 5 GB each. The file is deleted when the host closes the bridge, when you delete it, or when the bridge's timer ends (the cleanup runs when the service is next used, at the latest within about a day). As a backstop, a storage rule deletes anything still present 1 days after upload.
• Direct transfers (same network): when both devices are on the same local network and the app has verified that the connection stays local, the file goes device to device over an encrypted WebRTC connection (up to 50 GB each, or 300 MB on iPhones before iOS 26, whose browsers buffer the file in memory instead of on disk). It is never uploaded to us and we never store it. To set up that connection the devices exchange connection details (network addresses, session descriptions) through the bridge's realtime channel; these are not stored. A public STUN server (Google, stun.l.google.com) is asked once for each device's own network address; no file data passes through it. A received direct file stays only in the receiving browser's private storage until you download it or leave the bridge.
• Text messages: stored with the bridge in our database and deleted with it (bridge records are removed within about a day after the bridge ends).
• What we never collect: accounts, names, email addresses, phone numbers, the contents of your files (we never open or scan them), browsing history, advertising identifiers or device fingerprints.

The Chrome extension

"NoWireConnect - Transfer Files PC to Phone" is the same service in your browser's side panel. It talks to the same backend as the website and nothing else.

• What it keeps on your computer: your preferences - session length, sound on/off, "shrink photos" and the direct-transfer mode - in chrome.storage.local, and, while a bridge is open, a reference to that bridge (its ID, your role and your device secret) plus any code you scanned with the webcam, in chrome.storage.session, which Chrome clears when you quit the browser. This data never leaves your computer and is not readable by us. Removing the extension deletes all of it.
• Permissions: "sidePanel" (the extension's interface is a side panel) and "storage" (the preferences above). The extension requests no host permissions and has no access to your browsing history, your tabs or the content of web pages.
• Camera: used only when you click "Open camera" to scan a bridge QR code with your webcam. Video frames are read on your computer to find the QR code; nothing is recorded, uploaded or kept, and the camera is released as soon as a code is found or the tab is closed. Chrome asks for your permission first.
• No analytics, no trackers, no ads, and no remote code: every script the extension runs is bundled inside the extension package.
• On first install the extension opens nowireconnect.com/extension/welcome/ in a tab, and if you remove it Chrome opens nowireconnect.com/extension/uninstalled/. Both are plain pages; nothing about you is sent.

What stays in your browser on the website

The website keeps your preferences (sound, "shrink photos", direct-transfer mode) in your browser's local storage, and - for the tab where you created or joined a bridge - that bridge's device secret in session storage, which is cleared when the tab closes. Received direct files wait in the browser's private storage until you download them or leave the bridge. None of this is sent to us or readable by us.

Who processes data for us

We run the service on these providers, each only for the purpose listed. They act on our instructions and do not use your data for their own purposes.

• Supabase - database (bridge records, file metadata, messages, abuse counters), realtime channel (live updates and direct-transfer connection setup) and server functions (the code that issues upload/download links and enforces limits).
• Cloudflare R2 - storage of the file bytes sent through the bridge.
• Website hosting - the static website is served by Spaceship, Inc. (4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA); like any web server it may keep standard access logs (IP address, browser type, requested page) for a limited time.
• Google STUN server - contacted only during direct-transfer setup to learn each device's network address; receives no file data.

Who can see your files

Access to a bridge needs its unguessable ID (encoded in the QR code) or its 6-character code, and every device that joins receives its own secret; our server checks both on every request. Anyone you show the QR code or code to can join the bridge and see or download its cloud files, so share them only with devices you trust. Bridge codes are not published or listed anywhere, and code entry is rate-limited.

How long we keep things

A bridge lasts as long as you choose when creating it (15 minutes to 4 hours, extendable to at most 8 hours). When it ends or the host closes it, its cloud files are deleted and the bridge record is removed within about a day. Abuse counters (hashed IP) are dropped within two hours. We keep no backups of bridge data.

Your rights and how to delete your data

Because there are no accounts, the way to delete everything about a bridge is to close it (host) or let its timer run out - that removes its files, messages and records. Preferences on your own device are removed by clearing site data in your browser or, for the extension, by removing the extension.

If you believe we hold something about you beyond that, or you want to exercise a right under data-protection law that applies to you, email contact@nowireconnect.com and we will respond.

Changes to this policy

We will update this page when the service changes, and update the "Last updated" date at the top. Substantive changes to the extension's data handling will also appear in the Chrome Web Store listing.