Toss sends files directly from the sender's browser to the recipient over encrypted WebRTC. Files are never stored on our server. File names and sizes are encrypted end to end. We don't collect your email, phone number or name: your identity is a random key stored in your browser. No cookies.

To see which features are used and to fix bugs, the Toss web app shown in the sidebar sends anonymous usage counts to Umami (the kind of page opened, never your link, and which buttons are pressed) and error reports to Sentry (the error, where in the code it happened, the browser and the kind of page). They never include files, file names or sizes, links, names or ids. Both are off if you decline Firefox's "technical and interaction data" permission for this add-on (at install, or later in Add-ons and themes → Toss → Permissions and data), or if your browser sends Global Privacy Control or Do Not Track (in Firefox: Settings → Privacy & Security).

Full policy: https://toss.appbits.dev/privacy