Controller
S.C.G. Wolfpack Solutions e.U., owner Stephan Gruber, Roseggerstraße 17/1, 2540 Bad Vöslau, Austria. Privacy contact: kontakt@wolfpack-solutions.at.
Transfer and connection
CopyShuttle transfers text and links between paired browsers without user accounts. Content is encrypted in the browser; our relay and databases receive encrypted messages. Delivery uses technical connection identifiers, timestamps, sizes and encrypted data, as well as the IP address technically required for network connections. The application does not log message content as plaintext.
Browser storage
The encrypted connection stores keys and pairing data in your browser’s local database (IndexedDB, “copypal-pairing-v1”). Pairing data remains until you disconnect or clear website data. Short-lived local records prevent repeated invitation attempts; they are valid for five minutes and cleaned up during subsequent attempts. Pending invitations use tab-scoped SessionStorage (“copypal-pending-invitation-v1”), valid for at most five minutes and retained until used or the tab is closed. These stores support the connection you requested, not advertising. The application does not persist drafts. Deleting local keys may permanently prevent access to earlier history.
Your automatic-send preference
Automatic sending starts turned off. When you use its switch, we remember your explicitly chosen setting in this browser (LocalStorage, “copypal:automatic-send:v1”). This stores only “true” or “false”, with no text, identifier or advertising profile. Your choice remains until you change it or clear website data. It is independent of advertising consent; refusing advertising does not prevent transfers.
History, deletion and backups
Messages remain available in history for at most 24 hours from their original creation. The application then stops serving them; physical database cleanup is asynchronous. You can delete history and disconnect devices. Encrypted daily backups remain for up to 24 hours after their checkpoint, so backup copies can outlast active history. Expired archives are removed by the next successful cleanup. Recovery must not reopen expired, deleted or disconnected content. Technical recovery records preserve these deletion decisions.
Hosting and recipients
We use Microsoft Azure for the application, encrypted backups and operations, and MongoDB Atlas for databases. The configured application and backup storage are in Ireland, the primary database in Frankfurt and the independent recovery database in the Netherlands. Storage regions do not guarantee that all administrative, support or advertising data is processed exclusively in the EU.
Google AdSense and consent
The free application is intended to use Google AdSense. When advertising is enabled, we load Google code and Google’s Consent Management Platform (CMP). Google Advertising Products (IAB vendor 755) is the selected advertising partner. Depending on your region and choice, IP address, browser/device data, page information and cookie or similar identifiers may be processed. The CMP shows the specific purposes, providers and storage information. The first dialog lets you consent, decline or manage options; closing it means no consent. Advertising consent is not preselected. We do not request manual display ads when required storage/Google consent is missing or refused; the tool remains usable. Google uses the complete consent signals to decide whether personalized or non-personalized ads are permitted.
Third parties in the browser
AdSense and CMP scripts execute in the transfer document with normal page privileges. Encryption against our server does not technically isolate locally visible content or input from these scripts. Our integration does not supply messages, invitation codes or keys as advertising parameters. Google may process data outside the EU/EEA. See Google’s privacy information and the provider information displayed in the CMP.
Change your choice
When Google’s CMP is enabled, use “Privacy and cookie settings” on the transfer page to change or withdraw your advertising choice. Withdrawal applies going forward. If an ad blocker blocks the provider completely, its settings dialog may also be unavailable; you can additionally clear stored website data in your browser. This separate privacy document loads no AdSense or CMP tags.
Legal bases and rights
Requested transfers rely on GDPR Article 6(1)(b); necessary operational protection relies on Article 6(1)(f), with an interest in a secure, reliable service. Where required, ad personalization and nonessential device storage rely on consent. Subject to legal conditions, you may request access, correction, erasure, restriction and portability, object, and withdraw consent. Contact us without emailing message contents or keys. You may complain to a competent supervisory authority, including the Austrian Data Protection Authority.
Google Privacy · Google partner sites · Datenschutzbehörde
Go to Transfer