#Privacy Policy / 隐私政策
Last updated: 2026-10-11 · 最后更新：2026-10-11
#English
Tossway runs https://tossway.com. We collect as little as we can.
#What we store
- What you send: text and files, with their file names and sizes, are stored until they expire (1d by default, at most 7d) and are then deleted automatically. Anyone with the pickup code or link can open them.
- No accounts: we do not ask for your name, email or phone number.
- How we treat it: content is sent over HTTPS and stored encrypted by Cloudflare. We do not look at, analyse, sell or share it, and we do not use it to train AI. We only check an item when it is reported as illegal. Items sent with a pickup password are encrypted in your browser, and the password is never sent to us.
#What is processed to keep the service safe
- IP address: used to rate-limit uploads and pickups and to stop abuse. Request logs, which include IP addresses, are kept by our hosting provider for a short time for troubleshooting.
- Cloudflare Turnstile: before an upload, Cloudflare checks that the visitor is a human. Cloudflare processes data for this under its own privacy policy.
#Nearby devices
While the site is open, it tells other open Tossway pages on the same network (and devices you paired) that this device is here, using a random name such as "Blue Dolphin" generated in your browser. The network is identified by a one-way hash of your IP address and is not stored. Paired devices share a random secret kept in each browser. When you send to a nearby device, only a short notice with the pickup code is passed on; the other device opens it only if its user taps Receive. Files sent to a nearby device can go directly from one device to the other (peer-to-peer) without being stored on our server; to connect, the two devices learn each other's network (IP) address, and only after the receiver accepts.
#On your device
The site keeps your theme setting, the list of codes you sent from this browser, its random device name and pairing secrets in your browser's local storage. If you pick a language, it is saved in a cookie so the page opens in that language next time. The theme and the list of codes never leave your device. The device name is shown to nearby and paired devices, and a pairing secret is sent to the server to reach your paired devices (and held for up to 10 minutes while pairing). Clearing site data removes all of it.
#Service providers
The service runs on Cloudflare (hosting, storage, security). We do not sell your data, show ads, or use third-party analytics.
#Your choices
You can ask us to delete an item before it expires by emailing support@tossway.com with its pickup code.
#Contact
#中文
Tossway 运营 https://tossway.com，我们尽量少收集信息。
#我们存储什么
- 你发送的内容：文字和文件（含文件名和大小）保存到过期为止（默认 1d，最长 7d），之后自动删除。任何拿到取件码或链接的人都能打开。
- 没有账号：我们不要求你的姓名、邮箱或手机号。
- 我们如何对待它：内容通过 HTTPS 传输，由 Cloudflare 加密存储。我们不会查看、分析、出售或分享，也不会用于训练 AI。只有收到违法内容举报时，才会检查被举报的那一条。设置了提取密码的内容在你的浏览器里加密，密码不会发给我们。
#为保障安全会处理的信息
- IP 地址：用于上传和取件的频率限制，以及防止滥用。托管服务商会短期保留包含 IP 地址的请求日志，用于排查问题。
- Cloudflare Turnstile：上传前由 Cloudflare 判断访问者是否为真人，Cloudflare 按其隐私政策处理相关数据。
#附近的设备
网站打开时，会告诉同一网络下（以及你配对过的）其他打开着 Tossway 的设备「这台设备在这里」，使用浏览器随机生成的名称，例如「蓝色海豚」。网络通过 IP 地址的单向哈希识别，不会被保存。配对的设备共享一个随机密钥，保存在各自的浏览器里。发给附近设备时，只会传递一条带取件码的通知，对方点击「接收」后才会打开。发给附近设备的文件可以在两台设备之间直接传输（点对点），不存到我们的服务器；为了建立连接，两台设备会互相知道对方的网络（IP）地址，这只在接收方同意之后发生。
#保存在你设备上的信息
网站会在浏览器本地存储里保存你的深色 / 浅色设置、本浏览器发送过的取件码列表、随机设备名称和配对密钥。如果你手动选择了语言，会保存在一个 Cookie 里，下次打开时直接用这个语言。深色设置和取件码列表不会离开你的设备；设备名称会显示给附近和已配对的设备；配对密钥会发送到服务器，用于连接你配对过的设备（配对过程中最多保留 10 分钟）。清除网站数据即可全部删除。
#服务商
本服务运行在 Cloudflare 上（托管、存储、安全防护）。我们不出售你的数据，不投放广告，也不使用第三方统计工具。
#你的选择
内容过期前，你可以发邮件到 support@tossway.com 并附上取件码，要求我们提前删除。