Shelf privacy policy
The short version
Shelf does not collect, transmit or sell any personal data. There is no account with us, no analytics, no advertising and no server of ours involved. Your files, messages and settings stay on this phone and move only between devices on your own network that you choose to connect.
What Shelf stores on this phone
The files in the folders you share, exactly where they already are. Your settings: device name, port, access mode, PIN or user accounts (passwords are stored as salted PBKDF2 hashes), trusted nearby devices and trusted WiFi names, a random install id used to identify the phone to nearby devices, the HTTPS private key and certificate if you turn HTTPS on. Chat messages, the shared clipboard, download jobs, nearby transfer history, share links and browser sessions, so they survive a restart. Its own log and crash reports (Settings → Diagnostics), kept only here and shared only when you tap Share.
What leaves the phone, and to whom
Devices you connect: while sharing is on, any device on the same network that opens the address, mounts the drive, uses a share link or sends over Nearby exchanges data with the phone directly. Links you paste: the download manager fetches the URL you give it; that site sees the phone's connection like any browser's. The web interface loads fonts from Google Fonts and a QR helper script from cdnjs in the browser that opens it; the app itself never contacts them. Nearby discovery announces the device name and install id by multicast on the local network; set visibility to Hidden to stop. Nothing is ever sent to the developer.
Permissions
All files access: a file manager that can share any folder needs it. Location: only to read the WiFi network name and to create the private network on older Android versions; the phone's position is never read or stored. Notifications: sharing status and transfer progress. Bluetooth: listing paired devices. Each permission is asked only when its feature needs it; Settings → Background → Permissions explains every one.
Accounts and deletion
User accounts in Shelf exist on this phone only. Remove one in Settings → Access, end browser sessions there, clear chat or history in their tabs, or use About → Erase app data to remove everything Shelf stored. Uninstalling the app removes its settings, accounts, chat and sessions; files in your shared folders are yours and stay where they are.
Security
Shelf serves plain HTTP and FTP on your local network by default. Settings → Secure connection adds HTTPS with a certificate the phone makes for itself. On networks you do not control, use HTTPS and a PIN or accounts. Browser sessions expire after 30 days of inactivity and can be revoked at any time.
Children
Shelf is a general utility, not directed at children under 13, and collects no data from anyone.
Changes and contact
If this policy changes, the new version ships with the app and is published with a new effective date. Questions: see Support on the Shelf web page.
Terms of use
As is
Shelf is provided as is, without warranty of any kind. Keep backups; a shared folder can be changed or deleted by anyone you give full access to.
Your content
You are responsible for what you share and with whom. Only share content you have the right to share, and only on networks where that is allowed. The download manager fetches whatever link you paste; respect the terms of the sites you download from.
Name and mark
The Shelf name and the three-shelf mark belong to the developer. The app may be used privately and commercially free of charge.
Law
These terms are governed by the laws of the developer's country of residence unless local law requires otherwise.
Delete your data
Shelf keeps no account or data about you anywhere but on your own phone. In the app: Settings → About → Erase app data removes every setting, user, link, message and log Shelf stored; uninstalling the app does the same. Files you shared stay in the folders where they already were, under your control.