The short version
You pick a file, choose how long it lives (1, 3 or 7 days), optionally set a password, and get a 6-digit PIN. Your recipient enters the PIN — plus the password if you set one — and downloads the file. When the timer runs out, the file is deleted from storage automatically. No accounts, no email, no tracking.
Security model
- Access requires the PIN — 6 characters from a 32-symbol alphabet (~1 billion combinations), with aggressive rate limiting against guessing.
- Optional password — stretched in your browser with PBKDF2-SHA256 (250,000 iterations). Only the stretched result is sent; the server stores a peppered hash of it. A stolen database alone cannot recover passwords.
- Short-lived download links — download URLs are signed and expire after 15 minutes, and work only once verified.
- No readable logs of your content — the operator cannot see file contents, and the storage bucket is private.
- IP addresses are stored only as salted hashes for abuse prevention — never in plaintext.
Privacy
- No accounts, no advertising, no analytics scripts, no third-party requests.
- The upload and download pages make exactly two kinds of requests: this site's API and the storage host that serves your file.
- Files are deleted on expiry, both from the index and from storage.
FAQ
How big can files be?
Up to 5 GiB per file. Larger files are uploaded in parallel 32 MiB chunks directly to storage, so a bad connection can resume by retrying individual chunks.
What happens when a file expires?
The scheduled cleanup job deletes the stored file within minutes of expiry, and the bucket's lifecycle rules provide a backstop so nothing can survive past its deadline.
Can I re-share the same PIN?
Yes — until the file expires. If you enabled “burn after download”, the file self-destructs after the first successful download.
I lost the PIN.
Unfortunately PINs cannot be recovered — they are the only key. The operator cannot restore access either.
Can the operator read my files?
No. The storage bucket is private; every access goes through short-lived, single-object signed URLs issued only after PIN/password verification. The server never stores decryptable passwords.
Is there a download limit?
By default no. “Burn after download” limits a file to a single download.