About
The web was not built to watch you. It learned to.
anony.ch exists because sending a file should not mean handing over a profile. No account, no upload, no record of who sent what to whom — and nothing left over to sell.
Data is a copy of you that outlives you
Every file you upload leaves a copy behind: a filename, a timestamp, an address, a device fingerprint, a habit. Copies get joined, sold, resold, leaked, subpoenaed. The file was never the point. The copy was.
-
Bots
Scrapers and crawlers
They index what you publish and guess the rest. A shared document with a real name in its metadata becomes a search result with a real name in it.
-
AI
Model trainers
Models are trained on text and images nobody meant to donate. Your CV, your photographs, your unfinished manuscript — if it is reachable, it is training data.
-
Ads
Brokers and advertisers
The same file, copied once into a profile, prices your insurance, your rent, your loan. Nobody asks. The model has already decided.
-
States
Networks and authorities
Your provider knows which addresses you talk to, when, and for how long. Mass collection is cheap now; a warrant is a formality afterwards.
What we do instead
Four decisions, each one checkable from your own browser.
-
Nothing is stored
The file never lands on our server — it travels from your browser to theirs. There is no archive to breach, no retention policy to trust, no database to subpoena.
-
The key never leaves the link
Encryption keys are generated in your tab and live in the part of the URL browsers never send to servers. Our relay forwards sealed bytes, not files.
-
Metadata is burned off locally
GPS coordinates, camera model, editing history: stripped in your browser by rewriting the JPEG and PNG headers. No re-encoding, no quality loss, no upload.
-
You can check all of it
Open the network tab. During a transfer you will see signatures and encrypted frames, not filenames. Every claim on this page is written to survive that inspection.
What we do not claim
- We are not Tor. Stealth mode hides both addresses from each other by relaying through us — we still see that a connection happened, never what was in it.
- We are not invisible to your own device. A compromised browser or a hostile extension sees everything you see.
- We do not promise anonymity. We promise nothing worth taking is kept.
What this is, and how it works
Short answers to the questions people ask before sending a file.
What is anony.ch?
A file and text transfer where the encryption happens in your browser. Nothing is uploaded: two browsers exchange sealed chunks, and the relay that carries them cannot read them.
Are my files stored on a server?
No. Files are never written to disk. While a transfer runs the server holds one room identifier in memory, and nothing else.
Can you read what I send?
No. The key is created in the sender’s browser and placed in the part of the link after the #, which browsers never transmit. The server only sees sealed frames.
How long does a link stay valid?
A room nobody connects to is closed 30 minutes after it is created. Once both browsers are connected there is no time limit — a large file can take an hour — and the room ends when the pages close. A one-time link dies when the last file arrives.
What does removing metadata mean?
Photos, PDFs and Office files carry hidden fields: GPS position, camera model, author, edit history. Those are removed on your device before encryption, without re-encoding, so the content itself does not change.
Do I need an account, and what does it cost?
No account, no email, no payment. There is nothing to sign up for because there is no user record to keep.
Does the other person see my IP address?
In a direct transfer the two browsers connect to each other, so each side sees the other’s address. With the IP-hiding option the traffic goes through the relay and neither side sees it.
How does the password option work?
Optionally you set a password. The key is derived from it with PBKDF2 (600,000 rounds), so the link alone opens nothing. Three wrong attempts close the room.
Surveillance is not a conspiracy. It is a business model with good defaults. This is a different default.
Send one file. Watch the drawer.
The audit log shows what happens to your data — including the moment it stops being ours.