MallowShare privacy and security
MallowShare is designed for temporary sharing without mandatory accounts. This is a technical overview of this application build, not a promise of guaranteed confidentiality or a substitute for a legal privacy policy.
How file sharing works
When WebRTC direct peer-to-peer transport succeeds, file data travels between the sender and recipient browsers over encrypted transport. The room server coordinates sessions and can handle text messages and file metadata. If optional temporary server caching is enabled, small encrypted file copies may be retained briefly.
Optional direct-QR downloads
After editing or converting a file you may choose Create download QR. This choice uploads the resulting file (up to 6 MB) to temporary server memory for up to 10 minutes or until the server restarts. It is accessible to anyone who has the unguessable link. The file is not encrypted end-to-end once temporarily stored on the server, and no login is needed to download it. Avoid confidential files in direct QR mode; use room sharing instead.
Room access
Password-based joining requires a room password. A QR invitation acts as a temporary access token; possession of a valid invitation allows joining until it is revoked or expires.
Retention and deletion
Temporary room state expires. The platform cannot delete copies recipients have already downloaded, and browsers may retain local transfer artifacts or cached app assets.
Safety
Do not use sharing rooms as permanent storage. Do not share secrets with people you do not trust. Ask the room owner before joining or redistributing sensitive files.
Optional advertising
Advertising is disabled by default. On public homepage and educational guide pages only, the operator may enable clearly labeled third-party banner ads or sponsor messages. Once enabled, advertising providers may collect device identifiers, browser information, cookies or usage data according to their own policies. MallowShare does not intentionally send your uploaded file contents or private room credentials to ad providers, and does not load banner ads inside active private rooms. Review any advertiser privacy terms and required consent controls before enabling ads.
Contact
This prototype does not yet publish a verified business contact address. A legitimate support contact and final privacy policy should be added before public commercial launch.
Document processing and signing
Some PDF tools send the selected document to MallowShare's processing service to create the result. Certificate signing also sends the chosen PFX/P12 certificate and its password to the processing service for that operation. Use a certificate only when you trust the site operator, and do not submit sensitive signing keys you cannot risk exposing. These transfers require a secure HTTPS connection when used outside a locally trusted browser context.
PDF editing and OCR limitations
MallowEdit visual text replacement covers detected words and draws replacements at the same position. The original selectable text may remain inside the PDF, even if hidden visually. OCR estimates text locations on scanned documents. Font metrics, page appearance and spacing can change. Do not use visual replacement as secure redaction; verify exported files before distributing sensitive information.