Security at Fairsend

Your files are encrypted in the browser before they are uploaded, and they are stored on servers in Germany.

  • Encrypted in the browser
  • TLS transfer and encrypted storage
  • Servers located in Germany
  • GDPR compliant
  • No external services

Encryption

Fairsend encrypts with AES-256-GCM, an established and widely used standard. With current technology, a 256-bit key cannot be cracked by trying every combination.

  1. Layer 1

    Browser Encryption

    Files are encrypted in your browser before they leave your device.

  2. Layer 2

    Integrity Protection

    If even a single bit of the data changes, it is detected and the transfer stops.

  3. Layer 3

    Transport Encryption

    In addition to file encryption, the entire connection is TLS-encrypted.

Encrypted storage

On our servers your files are stored in encrypted form only. The key is stored separately and is itself encrypted.

Infrastructure & Data Sovereignty

Fairsend runs its infrastructure exclusively in Germany. No data goes to third parties, cloud services or servers outside the EU. Only if you come via a Google ad and agree during checkout do we report the purchase to Google.

What we deliberately don't use

No Google Analytics, no Google Tag Manager, no external CDNs, no ad trackers, no social media plugins and no external font services in production. We host everything ourselves, because every external dependency is a possible data leak. Only if you come via a Google ad and agree during checkout do we report the purchase to Google.

Minimal Data Collection

We only store what the transfer technically needs. We do not build usage profiles and do no fingerprinting for advertising. Data that is no longer needed is deleted automatically.

Session Protection

Your Fairsend session is protected in several ways, from the first page load until you sign out.

Transport Layer

All communication between your browser and Fairsend is TLS-encrypted. Unencrypted requests are redirected to HTTPS. Browser security policies prevent clickjacking, cross-site scripting and embedding of our pages on other sites.

Session Management

Session cookies are only sent over encrypted connections and cannot be read by scripts. After a period of inactivity the session ends automatically. Every sign-in gets a new session ID.

Form Protection & Bot Defense

Every form is protected against cross-site request forgery (CSRF). Automated attacks and spam bots are detected and blocked.

Data Deletion & Retention

Fairsend is a transfer service, not an archive. We keep data as briefly as possible and delete it completely.

Automatic Deletion

When the chosen retention period ends, all files are deleted automatically and permanently. There is no recycle bin and no recovery. On the free plan, files are deleted right after the first download.

Proof of Delivery

When a download starts, Fairsend logs the time, IP address and recipient. A check value is created from these details and the SHA-256 checksums of the uploaded files and stored.

Encrypted Messages

Messages get the same security standards as files.

AES-256-GCM in the browser

Messages are encrypted with AES-256-GCM in the browser before they are sent.

Self-destruct

After reading, the encrypted content and its key are deleted.

GDPR & Compliance

Fairsend operates in compliance with the GDPR and is prepared for TÜV certification.

Your rights

You can exercise your rights to access, correction, deletion and data portability directly in your profile settings, without a support request. You can delete your account and all associated data at any time.

For Enterprises

Businesses get dedicated security features. With the four-eyes principle, a second person has to approve sensitive transfers before they are delivered. Password requirements, geo-lock and deletion periods can be set centrally for the whole team. The roles owner, admin and member control who can change what.

Our Security Promise

  • We do not sell data and do not show ads.
  • No tracking cookies, no analytics or advertising scripts, no cloud providers. Only if you come via a Google ad and agree during checkout do we report the purchase to Google.
  • We delete data as soon as technically possible.
  • We only store what the transfer needs.
Send securely now Features