Privacy policy
Requesto is built to know as little about you as possible. Your files are encrypted on your device and we never store them. This policy explains the small amount of information we do handle, and why.
Your files
We don't store your files, and we can't read them.
- When both devices are on the same Wi-Fi, files go directly from one to the other and never reach our servers.
- When they're apart, files pass through our relay. They're encrypted on the sending device before they leave it, and the relay forwards them piece by piece without writing them anywhere. File names and sizes are inside that encryption too.
- For guest links, the key that unlocks the files sits after the
#in the link. Browsers never send that part to a server, so it never reaches us.
What we store
To let your devices find each other and to apply your plan, our server keeps:
| Information | Why |
|---|---|
| Your Requesto ID, your plan and when you joined | To run your account |
| Your email address, only if you add one | To sign you in on a new device and for Premium |
| Each device's name, platform, public key, when it was added and when it was last online | So your devices can see and trust each other |
| Devices you've saved, with the label you gave them | To show them next to your own |
| How many files you sent on the same Wi-Fi this month | To apply the Free plan's monthly limit |
| Sign-in sessions, and one-time codes for adding a device or signing in by email | To keep you signed in. We store these only as hashes, and codes expire within 10 minutes |
We don't ask for your name, phone number or contacts, and we don't need a password from you.
Connection data
Like any online service, our servers see the IP address of each connection. We use it to route your transfers and to limit abuse, such as repeated sign-up attempts or code guessing. Our servers may also log the time and address of requests for security and troubleshooting, and keep those logs only as long as needed for that.
This website
reques.to uses no cookies, analytics, advertising or third-party scripts. Its fonts and code are served from our own server. The guest page runs in your browser and doesn't save anything on your device.
How we use information
Only to provide Requesto: connecting your devices, applying your plan, sending you sign-in codes, answering your messages, and keeping the service secure. We don't sell your information, show you ads or build a profile of you.
Who we share it with
We use a few service providers, each only for what's needed:
- Hosting for our servers.
- Email delivery, to send sign-in codes to the address you give us.
- Payments: if you buy Premium, the app store or payment provider handles the payment. We receive confirmation of your plan, never your card details.
We'll disclose information if the law requires it. Because files are encrypted end to end and never stored, we have no file contents to disclose.
How long we keep it
We keep account information while your account exists. Signing a device out ends its sessions immediately. One-time codes are deleted when used or after 10 minutes. To delete your account and everything linked to it, write to hello@reques.to from the email on your account, or from one of your devices.
Your rights
You can ask us for a copy of your information, to correct it, or to delete it. Write to hello@reques.to and we'll reply within 30 days. If you live in the EU or the UK, you also have the right to object to processing, to restrict it, and to complain to your data protection authority.
Children
Requesto isn't meant for children under 13, and we don't knowingly collect information from them.
Changes and contact
If we change this policy we'll update the date at the top, and tell you in the app if the change matters. Questions about privacy go to hello@reques.to. For how the encryption works, see Security.