Privacy Policy

Last updated: August 22, 2026

See also: Terms of Service · FAQ

RelicBeam is built to move files and text between people without asking who they are. This page explains, plainly, what the service handles, what is stored, what is visible to the operator, how long things last, and where the limits are.

The short version

No accounts. No email addresses. No contact lists. Rooms, Quick Beams, and Beam Links are temporary. Files are uploaded to RelicBeam, scanned for known malware, then encrypted at rest while they remain available. Quick Beam text/password messages are end-to-end encrypted in the browsers; the server only handles encrypted payloads for those messages. Room text is ordinary temporary Room content and is not E2EE. Convert tools run locally in your browser and do not upload the file being converted. Remote View uses encrypted WebRTC screen streaming. It connects the browsers directly when possible and can fall back to RelicBeam's TURN relay when networks prevent a direct path. RelicBeam does not record or store the screen stream. We do not run advertising trackers or build profiles of users.

Where end-to-end encryption applies

Quick Beam text/password messages are end-to-end encrypted. A temporary AES-256-GCM message key is created in the browser and shared with the other device using an ephemeral P-256 ECDH key exchange. The RelicBeam server relays public-key material, a wrapped session key, and encrypted message payloads; it does not receive the ECDH private keys or raw Quick Beam text key.

Files are not end-to-end encrypted. We deliberately chose server-side malware scanning, which means the server must be able to access actual file content during upload and scanning. The normal file path is: upload → temporary plaintext processing → malware scan → encryption at rest → download → automatic deletion. Large files are uploaded in resumable chunks; those chunks and the assembled file are temporary plaintext data until the scan finishes. Clean files are then stored encrypted using AES-256-GCM. Temporary plaintext upload/scan data is removed after processing.

Room text is also not end-to-end encrypted because it is intentionally published to the people in that Room. We do not manually inspect, open, preview, or review users' files or shared text as part of operating RelicBeam. Server logs use internal IDs rather than filenames or shared content.

What we handle

Files you choose to share. Files are temporarily stored on the server so they can be scanned and delivered. Clean files are encrypted at rest after scanning and automatically deleted according to the session rules below.

Text, links, codes, and passwords you choose to share. Room text exists as temporary Room content and is deleted when the Room ends. Quick Beam text/password messages are stored only as end-to-end-encrypted payloads during the active Quick Beam and are deleted when that session ends. Password mode adds visual masking on top of the same Quick Beam E2EE used for ordinary text.

A random browser/device identifier. RelicBeam stores a random ID in localStorage. It lets the service recognize that two tabs belong to the same browser and enforce the single-recipient rules for Quick Beam. It is not tied to a name or email. Clearing site data resets it.

Temporary host recovery state. While a Room or Beam Link is active, the creator capability and session details may be kept in sessionStorage so refreshing the same browser session can restore creator controls. This state is local to that browser session.

Share-to-RelicBeam staging on supported devices. When an installed PWA receives a file through the operating system's Share menu, the item may be staged locally in the browser's IndexedDB long enough to create a Quick Beam and upload it. This staging is on the device, not a separate RelicBeam cloud library.

Remote View connection data. Remote View uses encrypted WebRTC screen streaming. RelicBeam relays temporary session signaling (such as connection descriptions and network candidates) so the browsers can connect. Cloudflare's public STUN service helps discover a direct route; when a direct route is not possible, RelicBeam's TURN server may relay the encrypted WebRTC traffic. The TURN relay forwards encrypted packets and RelicBeam does not record or store the screen stream. As with normal WebRTC, peers and relay infrastructure process network addresses needed to establish the connection.

Network information such as an IP address. RelicBeam's infrastructure necessarily handles connection information so requests can be delivered and rate limits can be enforced. We do not keep a user profile or a history that maps IP addresses to Rooms, filenames, or shared text.

Anonymous operational counters

RelicBeam keeps small aggregate counters so the operator can understand whether the service is healthy and being used. Examples include total Rooms, Quick Beams, and Beam Links created, files uploaded, bytes transferred, downloads, malware blocks, scan failures, rate-limit hits, forced closures, and counts of successful local Convert operations such as PDF merges, splits, reorders, rotations, image conversion, and HEIC conversion.

These counters are not tied to a user, IP address, device ID, Room code, filename, or shared content. They are counts, not activity histories. RelicBeam does not use Google Analytics, advertising pixels, or tracking cookies.

How long things last

• Rooms close when the host ends them, when everyone has left for about a minute, or automatically after 6 hours, whichever comes first. Files and shared text in the Room are deleted when it closes.
• Quick Beams are capped at 2 hours and also close after the participants leave. A shared file is deleted after the intended recipient genuinely downloads it. Previewing a supported file does not count as that final download.
• Beam Links carry one temporary file and use the expiry chosen by the creator (currently 1 hour, 6 hours, 1 day, 3 days, or 7 days). A creator can also choose one-time deletion after the first successful download.
• Remote View codes wait for a viewer for up to about 10 minutes. Once approved, a Remote View session is capped at 2 hours and ends earlier when either side leaves or the sharer stops screen sharing.
• Unfinished resumable uploads are temporary. Idle upload sessions are cleaned up after about an hour, and orphaned chunk data is removed when the server restarts.
• Local Share Target staging is kept only on the device until RelicBeam consumes or clears the pending item.
• Aggregate counters described above may persist across server restarts and deployments because they contain no session content or user identity.

Malware scanning

Uploaded files are scanned with ClamAV before they become available to other people. In production, if the scanner is unavailable, RelicBeam fails closed rather than knowingly publishing an unscanned file. Files identified as infected are blocked and deleted. Malware scanning uses known signatures and heuristics and cannot guarantee that a file is safe.

Convert tools stay local

RelicBeam's image and PDF tools — including image conversion, HEIC conversion, PDF merge/split, page reordering/rotation, PDF-to-images, and images-to-PDF — run in your browser. The file being converted is not uploaded to the RelicBeam server. Browser capabilities and memory limits can still affect whether a conversion succeeds.

What RelicBeam's operator can see

The protected admin dashboard is intentionally limited. It can show active Room/Quick Beam metadata, active Beam Link identifiers and basic operational details, server health, storage and upload status, and anonymous aggregate counters. It does not show filenames, file contents, shared text, passwords, or a user activity history. The operator can force-close an active Room or Quick Beam and can delete a specific active Beam Link when needed for abuse response, legal compliance, security, or service stability.

Third parties involved in running RelicBeam

RelicBeam uses infrastructure providers to operate the service:

• Cloudflare sits in front of RelicBeam for HTTPS, network protection, and the tunnel to the origin. Network traffic, including uploads and downloads, passes through Cloudflare's infrastructure as part of delivering the service.
• Hetzner hosts the server in Germany. Temporary upload data and encrypted-at-rest files are stored on that server while a session is active.
• Google Fonts serves the site's typefaces. Loading a font can create a request to Google's servers. Google Fonts does not receive the files or text you share through RelicBeam from us.

RelicBeam does not send shared files or text to advertising networks or analytics services.

Children's privacy

RelicBeam is not designed to collect personal profiles from anyone, including children. Because there are no accounts, we generally do not know a user's age. Anyone using RelicBeam should follow the rules that apply to them where they live, and adults responsible for minors should decide whether the service is appropriate for a particular classroom or activity.

Changes to this policy

RelicBeam will change over time. If a change affects how data is handled, this page and the date above will be updated to describe the new behavior.

Questions or concerns

If anything here is unclear, or you want to report misuse or a privacy concern, email [email protected].