Privacy, by architecture.

The app

Hando creates no account and connects to no Hando service. Transfers go directly between the two devices on your local network.

Transfers use HTTPS with mutual TLS by default. The client pins the peer’s certificate fingerprint, so a transfer cannot be redirected to another device answering on the same address. Older setups can use plain HTTP, which you can choose in Settings.

Device identity, favorites, settings and transfer history are stored on your device. Received files stay in the receive folder you choose.

Unless you turn it off in Settings, the app sends anonymous usage statistics to our self-hosted Umami: which pages are opened and for how long, the platform, language and window size, and a random ID made on install. It never sends names, addresses, devices, files or messages.

When you send to or receive from the official LocalSend app, that app handles data on its side under its own policy.

This website

The site is a set of static pages served by GitHub Pages. It sets no cookies and runs no advertising. Our self-hosted Umami counts page visits without cookies or personal data.

The appearance and language you choose are kept in your browser’s local storage and are not sent to us.

GitHub, as the host, may keep standard access logs under GitHub’s privacy statement.

Links to GitHub, X and other sites leave this site; those sites have their own policies.