Privacy

Last changed October 2026.

ShareWithCare is a place to share things with particular people. This page says what we keep to make that work, who can see it, and how to have it removed. Questions or requests: hello@sharewithcare.com.

What we keep

• Your account: your email address, the name you give, and when you joined. If you sign in with Google or Microsoft, which account it is — not its password, its access tokens, or its photo.
• What you share: the writing, files, and links you share, their titles and notes, and who you shared them with. Pictures are re-saved without their hidden details (camera, location, editing history). PDFs and other files are kept exactly as you sent them, including anything inside them.
• Who opened what: each time someone views a shared item, or opens or downloads its file, we record who and when. That record is the point: whoever shared it can see it.
• Groups, classes, and settings: the groups you're in and your role in each, any classes an administrator has given you, and whether you want an email when someone shares something with you.
• How you came: joining is by invitation. When a member adds an email address to a group, or shares something with it, before anyone has joined with it, we keep that address, who added it, and how — so that its owner can join. It's kept even if they never do, and once they join it stays with their account, as the record of who invited them.
• Turned away: if someone who hasn't been invited tries to join, we keep the address they used, how, and when, for 30 days — so an administrator can invite them if they should be let in.
• Reports: if you report something, what you said and that it was you. The person who shared it isn't told.
• Keeping the service safe: counts of recent sign-in requests and uploads, so no one can flood the service or someone's inbox. They're kept under scrambled keys, not your address or your network address, and only for a day.

Each member can keep up to 500 MB shared at once.

Who sees it

• Nothing here is anonymous. The people you share something with see your name and email address. Members of a group see each other's names and addresses.
• Whoever shared an item — and, for an item sent on a group's behalf, that group's managers — can see who has opened it, and when. Items are shared only with people and groups someone chose, never with everyone, so that record only ever names people within the circle it was shared with.
• No one else can see what you share: not other members, not search engines, and not anyone who has its address.
• ShareWithCare's administrators can see shared items when they need to — to review a report, for example. When an administrator opens something, it's recorded in that item's history, which whoever shared it can see.
• Administrators can also see each invited address: who invited it, how, and whether it has joined.

Cookies

Only the ones needed to keep you signed in: a session cookie, which lasts 30 days and is renewed while you use the site, and two short-lived ones that protect sign-in forms. No analytics, advertising, or tracking cookies, and no analytics at all.

Emails we send

Sign-in links, address confirmations, and — when someone shares something with you by name and chooses to let you know — a short notice. A notice says who shared, never what. You can turn notices off on your account page. And if someone adds your address to a group before you're on ShareWithCare, an invitation to join, which says who added you but not which group. If you tried to join while you couldn't, and an administrator then invites you, one email saying you can join now.

Who handles it for us

• Vercel runs the site.
• Neon keeps the database — everything above, files included — in the United States.
• Resend sends our emails.
• Google and Microsoft, only if you choose to sign in with them.
• Sentry receives reports of errors in our code: what went wrong and the address of the page — never cookies, what you sent, or who you are.

How long we keep it

• What you share stays until you delete it. Withdrawing it or letting it expire hides it from everyone else; deleting it removes it, with its files and its record of who opened it.
• Your account stays while you use it.
• An invitation to an address that hasn't joined stays until an administrator removes it. If it's yours and you'd rather it didn't, write to us.
• Deleting your account (on your account page) signs you out everywhere and hides everything you shared at once. 30 days later, what you shared is deleted and your name and address are erased, with the record of who invited you. Anything you sent on a group's behalf stays with the group. The 30 days are a chance to undo a mistake: write to us within them.
• If an administrator deletes an account — for breaking the terms, say — it goes the same way, and its email address is kept on a list of addresses that can't join again, until an administrator allows it.
• Error reports and server logs are kept for at most 90 days. Backups are kept for Neon's restore window.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it — wherever you live. Write to hello@sharewithcare.com, and we'll answer within 30 days. You can also complain to your data protection authority.

Age

You must be at least 16 to have an account.

Changes

When what we keep changes, this page changes, and so does the date at the top.