Terms of Use & Privacy Policy

Terms of Use

By accessing and using Furtiva ("the Service"), you ("User") enter into a binding agreement with us ("Service Provider") and agree to the following terms:

• Content Retention: Photos and videos uploaded to the Service expire automatically after 24 hours or when their view allowance runs out (20 views for photos, 200 for videos — video previews issue several small requests per play). Expired content is permanently deleted. When a Sender unsends a photo or video, the link dies immediately — no one can open it afterward — and the encrypted file is permanently purged from our storage shortly thereafter as part of routine automated cleanup (within days at most).
• Consent: You may only upload photos or videos of yourself, or of other people with their consent. Sharing an intimate image of another person without their consent is a serious violation of these terms — and, in most jurisdictions, a crime.
• Prohibited Content: Users are strictly prohibited from uploading content that is illegal under European Union or Swiss law, harmful, or violating these terms. Prohibited content expressly includes, but is not limited to: (a) child sexual abuse material — we report it to the relevant authorities and cooperate fully with them; (b) non-consensual intimate imagery (NCII) — intimate photos or videos shared without the documented consent of every person depicted; (c) content intended to harass, threaten, extort, or defame; (d) content infringing third-party intellectual property rights or otherwise unlawful; (e) malicious software, phishing attempts, or other technical abuse; (f) any content violating applicable European Union or Swiss federal and cantonal laws and regulations.
• User Responsibility and Liability: Users bear sole and exclusive responsibility for all uploaded content and its compliance with applicable laws, regulations, and these terms. The Service Provider does not alter, modify, scan, or compress uploaded files; files are stored and served byte-for-byte as uploaded, including all metadata.
• Content Moderation Rights: The Service Provider reserves the absolute right to remove any content without prior notice and may suspend or permanently terminate User access for violations of these terms.
• Service Availability: This Service is provided on an "as is" and "as available" basis without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement, to the maximum extent permitted by applicable law.
• Third-Party Infrastructure: This Service operates on Cloudflare's infrastructure platform and is subject to Cloudflare's Developer Platform Service Terms. Content determined by either the Service Provider or Cloudflare to be illegal, harmful, or violating applicable terms may be blocked, removed, or result in service suspension in accordance with Cloudflare's policies and applicable law.
• Limitation of Liability: To the maximum extent permitted by applicable law, the Service Provider shall not be liable for any direct, indirect, incidental, special, consequential, or punitive damages arising from or related to the use of this Service.

Privacy Policy

In accordance with the European Union General Data Protection Regulation (GDPR) and the Swiss Federal Data Protection Act (FADP), here is what we collect and what happens to it:

• No accounts, ever. Furtiva has no sign-up, no email collection, no profiles, and no passwords. Your use of the Service is not linked to an identity.
• IP Address Collection: We collect and store the IP address of uploaders, based on our legitimate interest in service security and abuse prevention (Art. 6(1)(f) GDPR). IP addresses are retained only for the duration the associated file remains available, and are deleted together with it.
• Technical Data Processing: We process the technical data necessary to run the Service: (a) upload and expiration timestamps for automated deletion; (b) file size for storage management; (c) file MIME type for content classification and security filtering; (d) view/download counts and remaining allowances to enforce view limits and detect abuse patterns.
• Anonymous Recipient Tracking: We count views to enforce each link's allowance without collecting any personal information about recipients.
• Your Device Only: The list of photos and videos you've sent — including the private links and the "unsend" tokens — is stored only in your own browser's local storage. We keep no copy and cannot recover it for you.
• Encryption: Photos are encrypted at rest and are served only through their private links. Photo and video links are blocked from search engines and cannot be found by searching.
• Third-Party Access Logs: Cloudflare, our infrastructure provider, may retain access logs for up to 7 days for security, performance monitoring, and DDoS protection, per their privacy policy.
• No Additional Personal Data: Beyond uploader IP addresses and the technical data above, we do not intentionally collect or store personal information.
• Automated Deletion: All files, associated metadata, and collected IP addresses are automatically and permanently deleted at expiry — after 24 hours at most, or sooner via unsend.
• Data Sharing Limitations: We do not share, sell, or transfer collected data to third parties, except as mandated by applicable law, court order, or as necessary for Cloudflare's infrastructure services.
• User Rights: Under GDPR and FADP, Users may request information about their processed data via the contact below. Given our minimal collection and automated deletion, such requests have limited applicability.

Abuse Reporting & NCII

If a photo or video was shared of you without your consent, or you believe any content violates these terms or the law, we want to hear about it immediately: