This page describes what SecureShare (the share viewer at share.paperpilot.me) does and does not collect.
Files are decrypted on your device. The server only provides encrypted metadata and encrypted chunks needed to reconstruct the file.
If a share is password-protected, the password is used locally in your browser/device to derive decryption keys. It is not sent to our servers.
Anyone with the share link (and password, if set) may be able to decrypt the file. Treat share URLs as secrets and avoid posting them publicly.
We mark /s/ pages as noindex and send X-Robots-Tag headers to reduce accidental indexing, but you should still share carefully.
SecureShare uses Vercel Analytics for basic usage insights. Analytics help us understand performance and reliability; we do not use it to read your content.