Privacy Policy

Purpurri Transfer doesn't require an account. This page explains, in concrete terms, which data we process when you use the service, how long we keep it, and which providers we rely on to run it.

1. Data controller

The data controller is Purpurri (purpurritransfer.com). For any request about your data you can write to invii@purpurri.com.

2. What data we process, why and for how long

• Files and transfer data. When you create a transfer we store the files, their name, size and type, the generated previews, the optional message, the creation and expiry dates and the number of downloads. If you set a password, we only keep its hashed version, never the password in plain text. This is needed so you can send and others can download the files. It is kept until the link expires (14 days from sending, unless an extension is shown by the service), then automatically deleted.
• Email addresses of a transfer. If you choose email delivery we store the sender's and the recipient's address and we send the recipient an email with the link and your message. If you turn on the download alert we store the address to notify and we write to it at the first download. These addresses are used only for that transfer and are deleted along with it at expiry.
• Approximate location of the sender. When you create a transfer we derive the country and region from your IP address, for statistics and security purposes. The IP address itself is not stored with the transfer. Country and region are kept until the transfer expires.
• Daily sending limit. To enforce the daily sending limit, designed to prevent abuse, we keep a daily counter associated with your IP address. We keep it for as long as needed for security and abuse-prevention purposes.
• Download statistics. When a file is downloaded we record the date and time, approximate country, region and city, device type, browser and referring site. We don't store the IP address or data that directly identifies the person. We use this to count downloads and understand how the service is used, and keep it for up to 180 days.
• Page visits. We record which pages of the site are visited, saving only the page address and the date, without the IP address. We keep this for up to 180 days.
• Technical upload errors. If an upload fails, we record the file name and size, the error code and the upload timings, so we can fix problems. We keep this for up to 180 days.
• "Stay updated" signup. If you leave your email in the form we store the address and the signup date to send you product news. We do this only with your consent, which you can withdraw at any time, and we keep the address until you ask us to delete it.

The legal bases are: performing the service you ask for (transfers, links, emails, alerts); our legitimate interest in security, abuse prevention and the proper working of the service (limits, technical logs, statistics); and your consent for news by email.

3. Cookies and third-party tools

On the informational pages of the site (home, FAQ, Collant, Terms) Google Analytics is active; it measures visits in aggregate form and may set its own cookies. It is not active on the download and statistics pages of an individual transfer.

The site also saves the language you choose on your device, in the browser's local storage. To display typefaces the pages load Google Fonts from Google's servers, and some features (such as PDF and archive previews) use libraries loaded from a content delivery network. In these cases your IP address is visible to the provider of the service. The site also contains a link to Purpurri's Instagram profile: if you open it, your data is processed by Meta according to its own policy.

4. Providers we use

To run Purpurri Transfer we rely on selected external providers, which handle hosting and network, file storage, database and server functions, sending emails and statistical measurement of the site. Some of these providers may process data outside the European Economic Area: in that case we rely on the safeguards provided by their contracts and by applicable law. We don't sell your data and we don't share it with third parties for marketing purposes.

5. Security

The site and transfers use HTTPS/TLS. Files are stored encrypted, on infrastructure that encrypts them at rest. Link passwords are kept only in hashed form and the database is accessed only through controlled server functions. Anyone who has the link to a transfer (and the password, if set) can download its files: share it only with the people you intend.

6. Your rights

You can ask us for access, rectification, erasure, restriction, objection and portability of your data, and withdraw any consent you have given. Since there are no accounts, to find the data of a transfer we need its link (or ID) or the email used. Write to invii@purpurri.com. You also have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali, garanteprivacy.it).

7. Changes

We will update this page when our services or processing change. The valid version is always the one published here. Please also read the Terms of Use.