Privacy Policy

1. Core principle

ClipToss is designed as a public web app for short transfers between devices. Processing is built around data minimization, short sessions, intentional pairing, and client-side encryption.

2. Controller

Tom Silas Helmke
c/o Online-Impressum #4746
Europaring 90
53757 Sankt Augustin
E-Mail: tshfm78@gmail.com

3. Data that may be processed

• Transfer content: where technically possible, is prepared and encrypted in the browser. Short-lived technical data may be processed for pairing, delivery, and expiry control.
• Local browser storage: for language, theme, consent, PWA comfort, or short-lived local drafts on your current device.
• Technical access data: Hosting may technically process IP address, timestamp, browser data, and security logs.
• Optional ads and analytics: load only after consent, where enabled and properly configured.

4. Cookies, consent, and ads

Necessary storage technologies support website operation. Optional analytics and advertising technologies are activated only after consent. For Google AdSense in the EU, UK, and Switzerland, a Google-certified Consent Management Platform should be planned before live operation.

5. Hosting, realtime, and third parties

The website may be hosted on Vercel. Vercel processes technical access data for operation, delivery, and security. For active transfers, the current technical implementation uses Supabase for short-lived rooms, realtime connections, device association, expiry times, and encrypted file storage. Google AdSense loads only with valid configuration and required consent.

6. Legal bases

Technically necessary processing is based on Art. 6(1)(f) GDPR. Optional analytics and advertising technologies are based on your consent under Art. 6(1)(a) GDPR.

7. Your rights

You have rights of access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a data protection authority.