Privacy

Encryption

Your browser encrypts the file name and contents. The key stays after # in the share link. It is not sent to the server. Anyone with the full link can open the file while it is available.

Temporary storage

The server stores encrypted files, sizes, IDs, expiry times, download counts, and hashes of access tokens. It does not store file names or encryption keys.

Files expire after 30 minutes to 7 days. The default is 1 hour, starting after upload. Access stops at expiry. Cleanup removes expired files; a storage fault can delay removal. Each file allows 10 download attempts, including failed or cancelled attempts.

You can delete a file from the upload tab. Closing or reloading that tab removes the delete control. Deletion cannot remove a recipient’s copy or guarantee physical erasure from disks.

No accounts or access logs

No accounts, cookies, analytics, or advertising trackers. The app does not retain request or IP address logs. Short-lived counters in memory use secret hashes of network addresses to limit abuse. Transfer keys and delete tokens are not saved in browser storage.

Reports

A report blocks access until review. The original expiry still applies. The owner can read the comment. Do not include personal details or share keys.

Repeat reports keep the first comment. Comments are removed when review closes the report or cleanup removes the file. No IP address is added to the report.

Hosting

The service is designed for Hetzner in Falkenstein, Germany. The host and network providers can process connection details. Encryption does not hide all connection information.