Privacy & security
Private by design
Your file is encrypted in your browser before upload and decrypted only on the recipient's device. The server never sees your raw data — ever.
How encryption works
1. You select a file
The file stays on your device. Nothing is sent yet.
2. Browser encrypts it
AES-256-GCM encryption runs entirely in your browser. The server never sees the original file.
3. Ciphertext is uploaded
Only the encrypted data reaches our server. We have no key and cannot read it.
4. You get a 6-digit key
This key is the only way to decrypt the file. Share it with your recipient.
5. Recipient enters the key
Decryption happens in their browser. The server only delivers the ciphertext — it never decrypts.
6. Auto-deleted after 10 days
The encrypted file is permanently deleted. No backups, no traces.
What we collect
Files & text
Encrypted in your browser before upload. The server only ever sees ciphertext — never your raw file.
Technical data
Connection logs and IPs for security and rate limiting only. Never linked to your files.
Analytics
Anonymous usage statistics to help us improve the service. No personal data collected.
Security measures
Browser-side encryption
Your file is encrypted on your device using AES-256-GCM before a single byte leaves your browser.
Zero-knowledge storage
We store only the encrypted ciphertext. We have no key and cannot read your files — ever.
Decryption on download
The file is decrypted only on the recipient's device after they enter the correct 6-digit key. The server never decrypts it.
HTTPS in transit
Every connection is protected with HTTPS/TLS so the encrypted data is safe during transfer.
6-digit access key
Only someone with the correct key can trigger decryption. No key = no access.
Rate limiting
Per-IP upload and download limits protect against abuse and brute-force attacks.
Private text channel
Clipboard text travels over encrypted real-time sockets and is never written to disk.
Automatic deletion
10-day auto-delete
Every encrypted file is permanently deleted after 10 days. No exceptions, no backups.
Text is never stored
Clipboard messages exist only inside active connections and are never written to disk.
No recovery possible
Once deleted, files are gone forever. We keep no backups and hold no decryption keys.
What we never do
Read or scan your files — we physically cannot, they are encrypted
Share data with third parties
Require registration or accounts
Store personal information
Keep files beyond 10 days
Track individual users
Sell your data
Hold decryption keys — only you and your recipient have the key
Third parties & your rights
Google Analytics
Anonymous usage statistics only. See Google's Privacy Policy.
Because files are encrypted before they leave your device and we hold no decryption keys, we are technically incapable of reading your data. Files self-delete after 10 days. You stay in full control simply by choosing what to upload.