Privacy policy
LAST UPDATED 27 SEPTEMBER 2026
Who we are
xposed is a small service run by Arun Prakash. It lets you share files from your own computer with a private link. The website, share links, and sign-in all live on getxposed.link.
Your files
Your files stay on your computer. When someone opens your link, the file travels from your computer through our relay server, getxposed.link, to them. It passes through the relay's memory while it is being sent. We never store it, look inside it, or keep a copy. Share names, file names, and download counts stay only on your computer, not on our servers.
Early access sign-ups
When you sign up for early access, we store your email address and the time you signed up. That is all.
When you sign in
If you sign in with GitHub or Google, we store your verified email address, when you created your account, when you last signed in, and a sign-in session. We never see your GitHub or Google password. We do not get access to your repositories, mail, or files there.
Computers you connect
For each computer you connect, we store a random ID, a secret key stored only as a hash, your computer's name (its hostname), the address prefix of its links (like https://abcde.getxposed.link), and when it was connected and last seen.
People who open your links
Requests from people who open your links pass through our relay to your computer. Your computer, not us, counts downloads and estimates how many different people downloaded, using a one-way fingerprint of their IP address and browser. It shows you the browser type, such as “Chrome · desktop”. We do not track recipients.
Abuse reports
If you report a link, we keep the link and what you wrote so we can look into it.
Logs
Our servers keep technical logs to keep the service running and safe from abuse. They can include IP addresses. We do not use them to track you, and we do not sell them.
Cookies
We use no advertising or tracking cookies, and no analytics anywhere. We use a cookie to keep you signed in to the dashboard, a short-lived cookie during sign-in, and, on a PIN-protected share, a cookie that remembers you entered the PIN.
Who helps us run xposed
OVH hosts our server. Cloudflare runs our DNS. GitHub and Google handle sign-in if you choose them. Let's Encrypt issues our security certificates. We do not sell or rent your data to anyone, and we do not show ads.
Keeping and deleting your data
We keep your data while you use xposed. You can remove a computer from your dashboard at any time. To delete your account or your early-access sign-up, or to get a copy of what we have about you, email us and we will do it within 30 days.
Children
xposed is not meant for children under 13.
Changes
If we change this policy, we will update this page and the date at the top.