Privacy policy

Creating transfers and requests requires an authorised account. Public account registration is not available. Recipients can access valid shared links subject to their restrictions.

Who processes your data

The provider is TSOKAS G. WIDEVIEW ENTERTAINMENT L.P. (Greek registered name: TSOKAS G. WIDEVIEW ENTERTAINMENT Ε.Ε.), trading as Wideview Entertainment, VAT EL803334554, Greek business register (GEMI) 194800101000, 58 Grigoriou Lampraki, Glyfada 16675, Greece. Contact: [email protected], telephone +30 210 2205089.

We act as controller for account management, security, support and our legal obligations. For content processed solely under a business customer’s instructions, our role and duties are set out in a data processing agreement. Senders and request creators are responsible for lawfully collecting and sharing their data.

Data, purposes and legal bases

• Account names, email, preferences, plans and sign-in details: providing and managing the service under contract, GDPR Article 6(1)(b). For a business customer’s staff contacts, our legitimate interest in communicating and managing that relationship, Article 6(1)(f).
• Files, names and paths, sizes, transfer titles and messages, recipients and submitter details: carrying out the requested transfer. Where we act as controller for third-party details, we assess the legitimate interest in the requested transfer against their rights. Where we act as processor, we follow the customer’s documented instructions; the customer determines the lawful basis for its processing. Instructions are not themselves a lawful basis for every use of data.
• Technical events, access checks, device information and IP addresses during communication: our legitimate interest in protecting accounts, files and infrastructure from fraud and abuse.
• Notices, decisions, reconsideration and rights requests: compliance with applicable legal obligations, Article 6(1)(c), and legitimate interests in documenting and resolving disputes where no specific obligation applies.

For terms acceptance we store the account identifier, revision, language, acceptance time and an exact snapshot of the texts with an integrity digest. The record documents the contractual relationship and is not marketing consent or general privacy consent. We do not use file contents for advertising or training AI models. Required form fields are necessary for the relevant function; omitting them may prevent that function from completing.

Sources and people without accounts

We receive data from you, from a sender naming a recipient, from request creators or submitters, and from service activity. This notice also applies when you have no account but receive a link or submit files. If data came from someone else, you may request its source and processing information, subject to others’ rights. A reporter’s identity is not automatically disclosed.

Statistics and recipients

A transfer owner may see views, downloads, timing, approximate country or city, browser family, operating system and device type. Analytics use a daily hashed visitor identifier instead of raw IP addresses or full browser user-agent strings. This is pseudonymisation, not a guarantee of anonymity. Separate provider network and security logs may contain IP addresses.

Recipients see the content and details you include. Request creators see the submitter’s name and optional email. Authorised support staff have limited access, and competent authorities may receive information on a lawful basis. Reporter details are not public and are not automatically disclosed to the owner.

Providers and international transfers

We use Hetzner for computing infrastructure, Wasabi for file objects in a European region, Mailgun with EU settings for service email delivery, and Cloudflare for network services and Turnstile on public file requests. An EU region does not exclude every access or processing outside the EEA. Applicable processing agreements and transfer safeguards must cover the service’s actual configuration.

Cloudflare’s Turnstile privacy addendum also explains its independent abuse-prevention processing. You may request recipient details and a copy of applicable safeguards at [email protected].

Retention

Files follow transfer or request expiry and deletion. Uploads not attached to a transfer or request submission have a technical expiry within 24 hours. Analytics retention is determined by the owner’s plan and applied through periodic cleanup. Periodic jobs remove expired or deleted files and abandoned uploads, retrying technical failures and respecting documented preservation. You may request deletion at [email protected]. Link expiry does not mean simultaneous physical removal from every system.

Account details and history remain for as long as necessary for the active service, requests, legal duties and documented claims. Notices and decisions remain for assessment and challenges, with restricted access and review of necessity. Special file preservation requires a recorded reason and review date. Backups have a separate retention cycle and are used for recovery. Erasure requests are assessed across active systems, exceptions and backups.

Cookies and local storage

Essential cookies support sessions for up to 30 days, form protection, transfer unlocking for up to 12 hours and request-upload authorisation for up to 24 hours. Contact [email protected] to request access revocation. The application does not operate advertising trackers. The wt_session and wt_csrf cookies support sign-in and action protection; wt_dl_ and wt_req_ cookies relate to a specific transfer or request upload. The wt_scan_ cookie is stored only after explicit acceptance of an unscanned download, lasts up to one hour and is scoped to the transfer or submission. We record the time, warning version and a cryptographic fingerprint of the file set, with an account identifier only for an authenticated request recipient. We do not add IP addresses or file content to this record. Acceptance is not marketing consent. Clearing cookies may sign you out or remove access authorisation. Available functions and cookies depend on the page you visit.

Your rights and automated checks

You can request access, correction, erasure, restriction, portability where applicable, and object to processing based on legitimate interests. Contact [email protected]. We request only necessary identity verification and respond without undue delay, normally within one month, informing you of any lawful extension.

Access checks may prevent a file from being shared. Detected malware or an incomplete check may block access, subject to the specific size exception and recipient acceptance in section 6 of the terms. You can request human review and explain your circumstances. Content-notice decisions are made by an administrator. Automated risk detection is not, by itself, a legal determination about the content.

You may complain to the Hellenic Data Protection Authority or your local competent authority and seek judicial protection.

Published: 14/10/2026 · WT-LEGAL-2026-10-14-05