2beShared

Privacy Policy

Last updated: October 31, 2026

2beShared ("the app") lets you save links, videos and places shared from other apps into a personal library, organize them with notes and tags, share them with friends, and discover public items from other people. This page explains what data the app and the website 2beshared.com collect, why, who else receives it, and what rights you have.

Who is responsible

The controller responsible for data processing is Frank Haubenschild, Erlenstrasse 39a, 57234 Wilnsdorf, Germany. Email: info@2beshared.com.

Information we collect

• Account information — your email address and sign-in method (email and password, Google or Apple), handled by Firebase Authentication. Registered accounts also have a unique @handle that you choose. If you continue without registration, an anonymous guest account is created so your library can still be stored in the cloud.
• Content you save — links, YouTube videos and channels, and map places you share into the app, along with their fetched title, description, preview image, address or coordinates, plus your notes, tags, read status and whether each item is public or private.
• Friends, follows and sharing — your friend connections and connection requests, the people you follow, the people who follow you, people you've removed from your followers, the items you share with friends or via share links, and any notes you attach to them.
• Reactions and reports — reactions and comments you leave on items shared with you, and reports you file about items (reason and optional comment).
• Interests — the interests you pick, and the tags of your public items, used to recommend public items and people in the "For you" feed.
• Settings — preferences such as default visibility of new items, and reminder settings including your time zone so reminders arrive at your local time.
• Push notification token — a device identifier used to deliver notifications (shares, connection requests, new followers, reminders), if you allow notifications.
• Technical data — like any internet service, the servers we and the providers below use receive your IP address and basic request information when the app or website loads data.

Who can see your data

• Public items — items marked public (the default for new accounts; you can change it in Settings and per item) are visible to all app users, together with your @handle, in the Discovery feed, recommendations and on your person page. Other users can save a copy of a public item into their own library.
• Your profile — your @handle can be found by other users via search; your friends and followers can see it on their lists.
• Direct shares — items you share with a friend are visible to that friend, with your note.
• Share links — anyone who has a share link you sent (e.g. via WhatsApp, SMS or Signal) can open it on 2beshared.com and see the item, your @handle and your note.
• Private items — visible only to you.

How data is used

Your data is used only to provide the app's features: storing your library, showing it on all your devices, sharing with friends, the public feed and recommendations, notifications and reminders, and handling reports to keep the community safe. We also count aggregate usage statistics (e.g. number of new items or shares per day) to run the service. The legal basis is performance of our contract with you (Art. 6(1)(b) GDPR) and, for moderating reported content and keeping the service secure, our legitimate interest (Art. 6(1)(f) GDPR). Notifications are sent only with your permission.

Service providers

To run the app we use the following providers, which receive data only as needed for their task:

• Google Firebase / Google Cloud (Google) — sign-in, database, server functions and website hosting. Data may be processed on servers in the United States.
• Google Sign-In and Sign in with Apple — if you choose them, Google or Apple confirms your identity and shares your email address with us.
• Expo push service (650 Industries, Inc., USA) — delivers push notifications; it receives your push token and the notification text.
• Microlink (microlink.io) — receives the URL of links you save so it can fetch their title and preview image, and resolve short map links.
• YouTube (Google) — the app requests video and channel details from YouTube when you save a YouTube link, and the embedded player loads from YouTube when you play a video in the app.
• OpenStreetMap — map previews load map tiles from OpenStreetMap's servers, which receive your IP address and the map area shown.
• The websites you save — to build previews and estimate reading time, the app loads the page you saved directly from that website.

Where data is transferred outside the EU, the providers rely on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. We don't share your data with anyone else.

Visiting 2beshared.com

This section applies to everyone who visits the website, whether or not you use the app.

• Server logs — when you open a page, Firebase Hosting (Google) receives your IP address, browser type, the page requested and the time. This is needed to deliver the page and protect the site against abuse; we don't use it to identify you.
• Share links — opening a share link loads the shared item, the sender's @handle and their note from our database (Google Firebase). We don't record who opened a link, and share pages are kept out of search engines.
• Previews from other websites — a shared item's preview image is loaded directly from the website it comes from (for example a news site or YouTube), and a shared place shows map tiles from OpenStreetMap. These providers receive your IP address when the preview loads; their own privacy policies apply. Tapping the item opens the original website.
• No cookies or tracking — the website sets no cookies and uses no analytics or advertising of its own. It keeps one value in your browser's local storage to remember that you unlocked the password-protected preview of the site; it never leaves your browser.
• Firebase software — pages that load data (share links and the email confirmation / password reset page) use Google's Firebase software. It keeps a small record in your browser of the days it was used and sends it to Google along with its requests, so Google can monitor how its software is used. The password reset page also creates Firebase's sign-in storage, which stays empty because nobody is signed in there.

The legal basis is our legitimate interest in running the website securely and in showing you the content you chose to open (Art. 6(1)(f) GDPR). Storing the unlock value is strictly necessary for the service you asked for (§ 25(2) no. 2 TDDDG), so it needs no consent. You can remove everything the website stored by clearing your browser data for 2beshared.com.

Beta waiting list

While 2beShared is in a closed test, you can join a waiting list on 2beshared.com. We then store your email address, the time you signed up and your consent, and email you when more test spots open up. We use a double opt-in: you're only added after you confirm the link in the email we send you.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time — via the unsubscribe link in every email or by writing to us — without affecting the lawfulness of emails sent before. Your address is deleted when you unsubscribe or when the waiting list is no longer needed.

The waiting list is run with CleverReach (CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany), which stores the addresses and sends the emails on our behalf under a data processing agreement.

What we don't do

• We don't access your device's location — places only come from links or coordinates you share into the app.
• We don't use advertising, ad tracking or third-party analytics SDKs.
• We don't sell your data to anyone.

Data retention and deletion

Your data is kept while your account exists. You can delete your account at any time in the app under Profile → Settings, or by email as described on our account deletion page. This permanently removes your account, library, public items, profile, interests, friend connections, follows, reminder settings and push tokens. Items you already shared with others stay with the recipients, as copies in their libraries, unless you delete those shares first. Reports you filed may be kept for as long as needed to handle them.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Contact us at the email address above to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority.

Children

2beShared is not intended for children under 16.

Changes to this policy

If this policy changes, we will update it on this page and revise the "Last updated" date above.