Privacy Policy

Welcome to Send jSSH. This Privacy Policy describes how your information is collected, used, and handled when you use our service.

Zero-Knowledge Encryption

Send jSSH is built on a zero-knowledge architecture. All messages, images, and files you upload are encrypted locally in your browser before being transmitted to our servers.

The decryption key is appended to the URL fragment (after the # symbol) and is never sent to our servers. This means we have absolutely no way to read, decrypt, or access the contents of your shared items.

What We Store

When you use our service, we only store the following encrypted, metadata-related information:

• The encrypted payload (ciphertext or encrypted file blob).
• Expiration settings (e.g., delete after 24 hours, delete after first view).
• The number of times an item has been accessed.
• The date and time the item was created.

Data Processing for Integrations (Pro Users)

If you are a Pro user and opt into certain integrations, we process additional data to facilitate those services:

• Discord Webhooks: If you provide a Discord Webhook URL to receive read receipts, we store this URL securely in our database. When a note is accessed, we transmit the access time, IP address, and note ID to the provided Discord Webhook. We do not transmit the content of your notes.
• Custom Domains: If you link a custom domain to your account, we store the domain name to generate appropriate sharing links and route traffic for your notes.

Data Deletion

Items are permanently and irrecoverably deleted from our database according to the expiration policy you select. If you choose "Delete after first view", the payload is wiped from our servers immediately after it is requested by the recipient. Once deleted, the encrypted data cannot be recovered.