This is a translation of the Dutch terms and conditions. If the two versions differ, the Dutch text prevails.
1. Who we are
PassTransfer is a service of Kobalt Digital B.V.
| Item | Value |
|---|---|
| Provider | Kobalt Digital B.V. |
| Address | Koelmalaan 350, Unit 3.08, 1812 PS Alkmaar, the Netherlands |
| Chamber of Commerce number | 68839383 |
| VAT number | NL857613947B01 |
| Phone | +31 (0)72 210 0600 |
| hello@passtransfer.com | |
| Support | hello@passtransfer.com |
In these terms, "we" means Kobalt Digital B.V., and "you" means the person or the organisation using PassTransfer.
2. What these terms cover
These terms apply to all use of PassTransfer: the free service and PassTransfer Pro. By using the service you accept them. When you create a Pro account we ask you to confirm that explicitly.
How we handle personal data is not described here, but in the privacy statement. That statement is part of these terms.
3. What the service does
You enter a secret (for example a password), choose a validity period, and receive a link. That link can be used once. Whoever opens it sees the secret, after which the service erases the content.
Two things you need to know before using the service, because they are the core of the design:
- We cannot read the content, and therefore cannot recover it. Your browser encrypts the
content before it reaches us. The key sits behind the
#in the link and is never sent to a server by browsers. If you lose the link, the content is gone. We have no copy and no backdoor. - A link works exactly once. If someone else opens it first, it is used up for you. We cannot see who opened it: we do not ask for the identity of the recipient. So share the link through a channel you trust.
You choose the validity period yourself: one day, one week or one month. If the link is not used, a periodic clean-up task erases the content after that period expires.
In some workspaces a file can be sent along with a link. A link with a file is valid for one week at most. Whoever opens the link can download the file in the same browser tab. If the download fails, it can be tried again there, as long as the tab stays open and at the latest until two hours after the link was opened. After that, or as soon as the file has been downloaded, we erase it. We cannot read a file, so we cannot check it for viruses or other harmful content either.
4. The free service
You use the free service without an account. There are three limits you may run into in practice:
| Limit | Value |
|---|---|
| Number of links you can create per minute | 10 per IP address |
| Number of retrieval attempts per minute | 20 per IP address |
| Size of the secret | roughly 20,000 characters encrypted, and the sender's name at most 60 characters |
These limits exist to curb abuse, not to hinder you. We may adjust them when that is necessary to keep the service running.
We may change or discontinue the free service. If we discontinue it entirely, we will announce that on the site at least 30 days in advance.
5. What you may not do with the service
You may not use the service to:
- share content that violates the law, or to prepare a criminal act;
- mislead someone, for example by using a link in a phishing message so it looks trustworthy because it comes from our domain;
- distribute malware;
- overload the service, probe it in an automated way, or circumvent its security;
- resell the service in whole or in part as your own service, unless we have agreed to that in writing.
If we suspect one of these points is being violated, we may immediately block the link, the account or the environment concerned. With a Pro subscription we will tell you why, and you may respond. If the block turns out to be unjustified, we will restore the service.
Because we cannot read the content, we cannot check in advance what you share. You are responsible for what you send through the service, and for the right to send it.
6. No API
PassTransfer has no API. The service works through the website only.
There used to be one, public and without a key (/api/sender and /api/reciever, plus a second
version). It had no authentication of any kind: anyone could write data through it, and the oldest
version encrypted on our side, which meant we could in theory read the content. We removed it rather
than repaired it. Every /api/ address has returned a 404 since. Existing integrations no longer
work.
We do not intend to offer a new API. If one arrives, it will be described here.
7. PassTransfer Pro: subscription, price and payment
With Pro you get an account and your own environment on a subdomain, with your own logo, background and colours. Pro is a business service: we sell subscriptions only to companies and other organisations, not to consumers. That is why we ask for your company name at registration.
| Subject | Agreement |
|---|---|
| Price | € 120 a year, including VAT (see below for subscriptions started before 7 August 2026) |
| Term | one year, starting on the day of payment |
| Renewal | automatic, one year at a time |
| Payment | in advance, through Mollie B.V. |
| Invoicing | by e-mail, prepared through Moneybird B.V. |
Renewal and cancellation. If you cancel, the subscription runs until the end of the period you have already paid for. Until that moment you can resume it yourself. After that it lapses and the environment loses access. You cancel in your account settings.
Withdrawal. There is no right of withdrawal: the statutory right of withdrawal (article 6:230o of the Dutch Civil Code) applies only to consumers, and we sell Pro only to companies and other organisations.
No refund for stopping early. If you cancel halfway through the year, we do not refund the remaining part. You keep the service until the end of the term.
Price changes. We may adjust the price for a following term. We will let you know by e-mail at least 30 days before the renewal. If you do not agree, you can cancel before the renewal date.
Subscriptions started before 7 August 2026. If your subscription started before that date, the price stays € 51 a year, including VAT, renewals included. If you cancel and take out a new subscription later, the price stated in this article at that moment applies.
Non-payment. If a payment fails, we will let you know and try again. If payment is still not made, we may suspend the environment 14 days after the first failed attempt, and end the subscription after that.
8. Your environment and your subdomain
The subdomain is yours to use for as long as your subscription runs, and remains ours. You obtain
no trademark or other right to it. A number of names is reserved (for example api, www,
admin), and we may refuse or revoke names that are offensive or intended to mislead.
For what you upload:
| File | Allowed | Maximum |
|---|---|---|
| Logo | JPEG, PNG or SVG | 4 MB |
| Background | JPEG or PNG | 4 MB |
You declare that you have the right to use those images. Note that they are publicly retrievable once set: every visitor of your environment sees them.
What you and your staff share through the environment is and remains your content. We do not use it for anything other than performing this agreement, and we cannot read that content.
9. Availability
We do our best to keep the service available, but we do not promise a percentage. There is no SLA. Maintenance, outages at our suppliers and necessary interventions can make the service temporarily unreachable. Planned maintenance that makes the service unreachable for more than an hour is announced to Pro customers by e-mail in advance.
We do not offer recovery of shared secrets: once a link is used or expired, the content is gone and we cannot restore it. The server backups of our hosting provider may contain the encrypted content for up to 14 days, but without the key (which only exists in the link and never reaches us) that content is unreadable to anyone, including us. So do not use PassTransfer as an archive or as your only storage. Keep a password you will continue to need in a password manager.
10. Liability
The service is provided as is. You use it at your own risk.
We are not liable for:
- damage because a link ended up with someone other than you intended, or because a link was used before the recipient opened it;
- loss of content, for example because you lost the link or the validity period expired;
- temporary unavailability of the service;
- indirect damage, including lost profit, missed revenue and consequential damage.
If we are nevertheless liable, our liability is limited to the amount you paid for the service in the twelve months before the event causing the damage. If you use the free service, that amount is zero.
These limitations do not apply in the case of intent or deliberate recklessness on our side, and not insofar as the law prohibits them.
Report damage or an error as soon as possible, and in any case within 30 days after you noticed it, so we can still investigate it.
11. Security reports
If you think something is wrong with the security of the service, e-mail hello@passtransfer.com.
Give us the chance to fix it before you publish it, do not abuse the vulnerability beyond what is
needed to demonstrate it, and do not access other people's data. If you do so, we will not take
legal action against you. We respond within five working days. See also
/.well-known/security.txt.
12. Termination and what happens afterwards
You can cancel your Pro subscription at any time, with the effect described in article 7. We may terminate the agreement if you violate these terms, if you do not pay, or if we discontinue the service. In that last case we will refund the unused part of the term.
After the subscription ends, the environment becomes unreachable and we delete your account data according to the periods in the privacy statement. We keep invoice data longer, because the fiscal retention obligation requires that. If you want your data deleted or exported first, you can do that in your account settings; deletion is only possible after the subscription has been cancelled, because until that moment we need the data to perform the agreement.
13. Changes to these terms
We may change these terms. The current version is always on this page, with a date and a version number. A change that materially worsens your position as a Pro customer is announced by e-mail at least 30 days in advance. If you do not agree, you may cancel effective the date the change takes effect.
14. Other provisions
- Transfer. We may transfer our rights and obligations under this agreement if our company or this part of it passes to another party. We will let you know. You may not transfer your subscription without our consent.
- Subcontractors. We may engage other parties for the performance, such as hosting, payments and invoicing. Which ones those are is stated in the privacy statement.
- Partial invalidity. If a provision is invalid, the others remain in force and we will replace the invalid one with a valid provision with as much of the same effect as possible.
- Intellectual property. The service, the software and the PassTransfer brand are ours. You receive a right of use for the duration of the agreement, and nothing more.
- Applicable law. This agreement is governed by Dutch law.
- Disputes. We submit disputes to the court of Noord-Holland, location Alkmaar, the court of our place of business. If you are a consumer, that choice is not binding and you may go to the court of your own place of residence. Tell us by e-mail first; most things can be resolved without a court.