Privacy Policy
Last updated: 7 August 2026
The short version
floi does not collect, store, transmit or sell any personal data. On every tool but one there is no backend that could receive it, and the exception, File Transfer, is described in full below.
Your files
Video files you open are never uploaded. They are read directly from disk by your browser using a local object URL, decoded on your device, and discarded when you close the tab. No copy is made anywhere else.
Links you paste
YouTube URLs are parsed in your browser. To show a video's title and thumbnails, your browser requests them directly from YouTube's servers (youtube.com and i.ytimg.com). Those requests go from you to YouTube, not through us, and are subject to Google's privacy policy. We never see them.
Screen capture
Live Capture uses your browser's Screen Capture API. The stream exists only in the page, is used solely to draw the frames you explicitly capture, and is never recorded or transmitted. Sharing stops the moment you press Stop or close the tab.
Cookies and storage
No cookies are set. One item is written to localStorage, your light or dark theme preference. It stays on your device and can be cleared at any time through your browser settings.
Analytics
There is no analytics script, no tag manager, no advertising pixel and no third-party tracker on this site. Cloudflare, which serves the static files, keeps standard edge request logs as any host does.
File Transfer, and the one server on this site
The File Transfer tool sends a file from one of your devices straight to another. The file itself is never uploaded and never stored: it travels over an encrypted connection the two browsers open between themselves.
Two browsers cannot open that connection out of nothing. They first have to swap a session description, which is a few kilobytes listing the network addresses each can be reached on and the public half of the keys the connection will use. The six digit code you type opens a short-lived room on a Cloudflare Durable Object that passes those two messages between you.
That room:
- holds at most two connections, and is sealed once the second one arrives;
- copies messages between them without reading them, and refuses anything larger than 16 KB;
- never receives a filename, a byte of a file, or a message you send, because those travel on the direct connection it is not part of;
- stores nothing but an expiry timer, and is destroyed when you both leave or after ten minutes, whichever comes first.
Your browser also contacts a public STUN server to discover the addresses it can be reached on. That tells the STUN operator your IP address and nothing else, and it is the same mechanism every video call on the web uses. There is no TURN relay here, so no file ever passes through a third party even when a direct connection cannot be made.
No isolate runs for any other page on this site. Requests reach that code only at /signal/.
Pro Mode
The optional Pro Mode companion server runs on your own machine and listens only on 127.0.0.1. Requests to it never leave your computer.
Children
The site collects no data from anyone, including children under 13.
Changes
If this policy changes, the date above will change with it. Since the site collects nothing, material changes are unlikely.