Privacy Policy
Last updated: 27 October 2026
Your files and messages
OmniBeam sends your files and messages directly between your devices whenever it can, encrypted end to end by WebRTC. In that case they never reach our server.
When a direct connection is not possible (for example behind a strict firewall or a VPN), they pass through our server instead. They are still encrypted end to end: the two devices agree on a key that the server never sees, so it only forwards data it can't read, without saving it. Every transfer has to be accepted on the receiving device first.
Files shared by link
When you share files by link, your browser encrypts them (names included) before uploading. The key is only in the part of the link after “#”, which browsers never send to a server, so we store data we cannot read. Shared files are deleted automatically when the link expires (at most 3 days), after the first download if you chose that, or when you delete the link. Anyone you give the link to can download the files, so share it only with the people you mean.
Connection data
To let your devices find each other, the server sees your IP address, the random device name shown in the app, and the technical details needed to connect two browsers. These are kept in memory only while you are online and are not written to disk or shared.
The server also keeps simple daily totals (for example the number of connections, transfers and how they were sent). These are numbers only, with no IP addresses, names or file details.
What stays on your device
Your device name, theme, language, paired devices, links you created and the history of files you received (kept for 7 days) are stored in your own browser. You can clear the history in the app or by clearing the site's data. To open quickly and work without internet, OmniBeam also keeps a copy of its own app files (never your files) in the browser, replaced with every update.
Visitor statistics
If you allow it when the site asks, OmniBeam uses Google Analytics to count visits and see how the site is used (for example pages viewed, country, device and browser type). The Google Analytics script loads on every page, but it sets no cookies until you press Allow; until you choose, it only sends Google an anonymous visit count without cookies. If you choose No thanks, it sends nothing at all. Google receives your IP address with these requests. The files and messages you send are never included. You can change your choice at any time: . See how Google uses this data.
Problem reports
When something goes wrong, for example a transfer fails or a direct connection doesn't work, the page sends us a short anonymous report so we can fix it: what failed, the connection route, and your browser and system type. Reports never include file names, file contents, messages, pairing codes or addresses, and only the latest few hundred are kept. If many problems are reported at once, a summary (how many, what kind and which browsers) is sent to the site owner by email or Telegram so it can be fixed quickly.
Notifications
Notifications are off unless you turn them on in Settings. When they're on, the server keeps the notification address your browser gives it (it points to your browser maker's push service, such as Apple, Google, Microsoft or Mozilla), your language, and scrambled codes of your pairings and iPhone Shortcut inbox, so it knows which notifications are for you. A notification says which device wants to send you something and how many files, or the name of a file from your Shortcut, and goes to you through that push service. Never file contents or messages. All of this is deleted when you turn notifications off, or when your browser stops accepting them.
iPhone Shortcut inbox
If you turn on the iPhone Shortcut, what you share to it is uploaded to our server and waits there until OmniBeam on your device picks it up. Unlike transfers between devices, these files are not end-to-end encrypted (they are sent over HTTPS), so the server deletes them as soon as they're picked up, and after 24 hours at the latest. Only someone with your Shortcut's private address can add files to your inbox, and you can turn it off in Settings at any time.
Browser extension
The OmniBeam extension for Chrome and Edge only talks to the OmniBeam tab in your browser. When you use it, it sends the page address, link, image or selected text you chose to that tab, which sends it to your device like any other transfer. It does not read or collect your browsing, keeps the list of your devices only while the browser is open, and has no access to other websites, except reading the text you selected when you click its button, and an image you right-click (or any image, if you allow that option).
OmniBeam app for Windows
The OmniBeam app from the Microsoft Store opens this website in its own window. It works the same way and this policy applies to it in full.
No ads
OmniBeam has no accounts, ads or advertising trackers. The page font is served by omnibeam.site itself, not by Google Fonts.
Hosting
The site runs on a web host that may keep standard server logs (such as IP address and time of request) for security.
Contact
Questions about privacy: send a message on Facebook.