中文English

Xshare 隐私政策

更新日期：2026 年 10 月 26 日
开发者：suan suan tech
联系邮箱：[email protected]

本政策适用于独立 Android 应用 Xshare（包名 app.xshare.transfer）。Xshare 帮助你在可互通的局域网内传输自己选择的文件，并提供本地文件与媒体工具。

文件和设备信息

你通过系统文件选择器主动选择的文件会被复制到应用私有存储。发送时，文件内容、文件名、类型、大小及校验值会传给你连接的接收设备。接收的文件保存在应用内，直到你移除、清除应用数据或卸载；重要内容可导出至系统选择的位置。

设备发现和配对会在局域网中使用设备名称、应用随机生成的设备 ID、网络地址与临时会话信息。设备名称默认来自系统机型，可在设置中修改。我们不使用这些信息进行广告追踪或位置推断。

没有开发者云端中转

当前版本不要求注册账号，不接入广告、统计、崩溃上传或云端文件存储服务。文件直接在你连接的设备之间流转。接收人取得文件后如何保存、使用或再次分享，由接收人决定。

传输保护和网络范围

Android 应用之间使用分块 AES-256-GCM 加密，并在完成后核对源端 SHA-256。扫码配对会核对二维码中的设备公钥指纹。手动 PIN 配对适合可信局域网，不能保证抵御主动中间人。

网页快传使用局域网 HTTP，不提供 HTTPS 加密，请只在可信 Wi-Fi 或热点中使用。网页上传的文件保存后生成校验值；未提供源端哈希时不会进行两端哈希对比。二维码含临时邀请凭据，请勿公开分享。

每批上传都需在手机确认。配对会话 20 分钟后过期，服务最多运行 30 分钟；你可以随时关闭共享，撤销当前连接和网页文件发布。

权限

本地记录与删除

应用保存本地文件信息、SHA-256、方向、对端名称、大小、时间与传输状态，用于文件库和传输记录。你可删除文件副本、清除记录，或清除应用数据 / 卸载以移除本地数据。已导出或已被接收人保存的副本不会随应用删除。

官网访问

本官网不加载广告或分析 SDK，不使用追踪 Cookie。外观偏好仅存于浏览器本地。官网托管商 Cloudflare 在提供 HTTPS 与安全防护时可能处理请求 IP、浏览器信息和技术日志；这些是访问官网产生的信息，不包含应用内文件或传输内容。参见 Cloudflare 隐私政策。

政策更新与联系

新增云端、统计、广告或其他处理目的前，我们会更新本政策与应用内说明。对本政策有疑问，请联系 [email protected]。

Xshare Privacy Policy

Updated: October 26, 2026
Developer: suan suan tech
Contact: [email protected]

This policy applies to the independent Android app Xshare, package app.xshare.transfer. You choose files through the system picker. The app creates private local copies and sends file content, names, types, sizes and checksums only to devices you connect to. Local discovery also exchanges the device name, an app-generated random ID and network connection details.

The current version has no accounts, advertising, analytics, crash-upload SDK or developer cloud relay. Received files and local transfer records remain in app storage until removed, app data is cleared or the app is uninstalled. Export important files first. Copies exported or saved by recipients are not deleted when you remove the app.

App-to-app file chunks use AES-256-GCM and completed app transfers verify source SHA-256. QR pairing checks the device public-key fingerprint. Manual PIN pairing should be used on trusted networks. Browser transfer uses local HTTP and is not HTTPS encrypted. Browser uploads without a source hash generate a local checksum but do not compare hashes at both ends. QR invitations contain temporary credentials and should not be published.

Incoming upload batches require on-device approval. Pairing sessions expire after 20 minutes. The sharing service stops after 30 minutes or when you stop it. Camera access is used only to scan codes; images are not saved or uploaded. Notifications show the running service. Network and Wi-Fi permissions enable local discovery and transfer. A foreground service and temporary wake lock maintain sharing. No broad storage, SMS, contacts or call-log permission is requested.

Website visits

This website does not load advertising or analytics SDKs, or use tracking cookies. Your appearance preference is stored only in your browser. Cloudflare hosts this website and may process request IP addresses, browser information and technical logs to deliver HTTPS and security services. This does not include files or transfers inside the Android app. See Cloudflare’s privacy policy.

Deletion and contact

You can remove private file copies and clear local transfer records in the app. Contact [email protected] with privacy questions. We will update this policy before introducing new cloud, advertising or analytics processing.