Files & text

Encrypted in your browser before upload. The server only ever sees ciphertext — never your raw file.

Technical data

Connection logs and IPs for security and rate limiting only. Never linked to your files.

Analytics

Anonymous usage statistics to help us improve the service. No personal data collected.

Browser-side encryption

Your file is encrypted on your device using AES-256-GCM before a single byte leaves your browser.

Zero-knowledge storage

We store only the encrypted ciphertext. We have no key and cannot read your files — ever.

Decryption on download

The file is decrypted only on the recipient's device after they enter the correct 6-digit key. The server never decrypts it.

HTTPS in transit

Every connection is protected with HTTPS/TLS so the encrypted data is safe during transfer.

6-digit access key

Only someone with the correct key can trigger decryption. No key = no access.

Rate limiting

Per-IP upload and download limits protect against abuse and brute-force attacks.

Private text channel

Clipboard text travels over encrypted real-time sockets and is never written to disk.

10-day auto-delete

Every encrypted file is permanently deleted after 10 days. No exceptions, no backups.

Text is never stored

Clipboard messages exist only inside active connections and are never written to disk.

No recovery possible

Once deleted, files are gone forever. We keep no backups and hold no decryption keys.