Privacy & Security Architecture
JGS QuickDrop was engineered from day one with a Zero-Trust, Zero-Knowledge philosophy. We cannot see your data, we cannot store your files, and you have absolute control over every byte.
Certificate of Zero-Server Storage & Non-Retention
Zero bytes of transferred files, images, videos, documents, or clipboard payloads ever touch physical disks, cloud buckets (AWS S3, GCS, Cloudflare R2), or databases.
Session coordinates and 7-character Quick Codes exist strictly within transient Node.js process memory and are irrevocably purged upon disconnection or after 10 minutes.
Payload data travels directly between device IP addresses secured with DTLS 1.2+ and 256-bit AES-GCM keystreams without transiting through any intermediate proxy.
Zero tracking cookies, zero marketing pixels, zero analytics scripts, and zero account collection. No logs of transferred filenames or user identities are retained.
Quick Connect RAM-Only Code Architecture
Our 7-character Quick Connect codes (IP API & Re API) are stored exclusively in volatile server RAM. They never touch disk storage, databases, or logs, and are automatically purged when the session closes or after 10 minutes.
Zero-Knowledge 256-bit Universal E2EE
All chats, file transfers, and clipboard payloads are encrypted client-side using deterministic 256-bit keystream encryption. Keys are derived strictly within participant browser runtimes. Even our signaling server cannot read your messages or access your transfer contents.
Zero Server Storage & Pure P2P Transfer
JGS QuickDrop transfers files directly between your phone, tablet, and computer using direct WebRTC DataChannels. Your files never touch or reside on any cloud server, database, or disk. Once received, files exist only in your browser memory until you choose to download them.
Local Privacy-Preserving Speed Benchmark
Our network speed benchmark runs strictly between your device and the local gateway. It performs zero external tracking, collects zero analytics telemetry, and never exposes your IP or network identity to third parties.
Instant Session Auto-Destruction
When any participant clicks "Disconnect" or "Back to Hub", a room termination broadcast is instantly dispatched. The room and all cryptographic memory buffers on every connected device are completely destroyed within milliseconds.
Intruder Shield & Strict Link Authorization
Unauthorized connections attempting to hijack or brute-force sessions without valid room authentication tokens are permanently blocked at the signaling gateway. Each room is capped at 5 authorized devices to eliminate denial-of-service risks.
Selective Downloads & Privacy Previews
Zero automatic downloads. You maintain 100% control over which files enter your file system. Previews for photos, videos, audio, and documents are rendered in a sandboxed viewer before you decide to save.
Conversational Chat Safety Filters
Our real-time group chat enforces conversational-only content. Code snippets, script injection attempts, raw ciphertext strings, and unauthorized external links are blocked from transmission to protect all devices on the network.
No Accounts, No Tracking, No Analytics
JGS QuickDrop requires no registration, no phone numbers, no email addresses, and uses zero third-party tracking scripts or tracking cookies. Your transfer sessions are completely anonymous.
10-Minute Ephemeral Expiry
Every session automatically expires after 10 minutes of creation. If forgotten, sessions expire automatically and are cleaned up by automated garbage collection.
Cryptographic Standards
Transfers utilize standard WebRTC DataChannels secured by DTLS 1.2+ with elliptic-curve Diffie-Hellman (ECDHE). Payload messages, clipboard snippets, and room signals are wrapped in AES-GCM 256-bit ciphertext. Sessions are strictly volatile in-memory and terminate automatically upon participant exit.