No storage
The server writes nothing to disk. Rooms are a Map in RAM that expires after 30 minutes.
Browser to browser · the key is yours
Your browser encrypts the file and the recipient's browser decrypts it. The server only forwards sealed envelopes — it never sees the file, the key, or a record of them.
Your browser strips hidden details like photo location and seals the file with AES-256-GCM. Nothing is uploaded.
A one-time link is created. The key sits after the # in that link, and the browser never sends that part to the server.
The file is decrypted in their browser. The server keeps no copy — when both tabs close, nothing is left anywhere.
JPEG, PNG, PDF, DOCX/XLSX/PPTX, MP4/MOV, MP3 and SVG metadata is stripped byte by byte, in your browser. Everything else is encrypted as-is.
No size limit · the file is never uploaded
Send the password through a different channel than the link — a call, a message, or in person.
If you lose the password the file cannot be opened. There is no recovery.
Send the password through a different channel than the link — a call, a message, or in person.
If you lose the password the file cannot be opened. There is no recovery.
The key sits after the #. It is erased from the address bar the moment your recipient opens it.
Compare these 16 characters with your recipient out loud. If they match, nobody sits in the middle.
Type the password the sender gave you separately.
The file is on your device. Nothing was stored on any server.
This was a one-time link. It is now closed and the key is gone.
On by default: the transfer takes our server’s path instead of a direct connection. Neither side sees the other’s address — not in the page, not in the network tab. The relay only ever forwards sealed bytes it cannot read. Switch it off for a direct connection.
The server writes nothing to disk. Rooms are a Map in RAM that expires after 30 minutes.
No IP addresses, room IDs or payloads are recorded, in development or production.
Encryption keys are generated in your tab and live in the part of the URL browsers never send to servers. Our relay forwards sealed bytes, not files.
Drawn in this browser. The key never leaves your device.