How it works

Files are encrypted before being written to persistent storage using AES-GCM authenticated encryption, a modern and widely used standard that protects both confidentiality and integrity.

• Stored file data is unreadable without the service’s encryption key.
• Separate keys are derived for stored file blobs.
• Random nonces are used during encryption.
• Tampered, corrupted or incomplete encrypted data is rejected rather than returned silently.
• Encryption keys are kept separately from the stored file data.
• This is encrypted storage, not end-to-end encryption: the server must temporarily decrypt files to provide previews, audio processing, ZIP creation and downloads. For this service, that’s an intentional trade-off so those features can work while the persistent stored copies remain protected.

Files are protected while stored, but the service itself must be trusted to process them.

• Upload individual files, multiple files or complete folders.
• Review the queue before uploading.
• Folder structures are preserved.
• When processing finishes, a private share link is generated.
• Recipients can open it without registering.

Treat the share link as private and only send it to the intended recipient.

Every transfer has a time limit:

• 1 day
• 5 days
• 30 days

You can also enable Expire after first download.

For example:

• 1 day with normal multiple downloads
• 5 days, or until the first download
• 30 days, or until the first download

Whichever happens first ends the transfer.

30-day transfers currently have a 100 MB total limit.

When enabled, the whole transfer is treated as one delivery.

• A single file downloads directly.
• Multiple files or folders are supplied as a ZIP.
• After the first download, the link becomes unavailable.
• Previewing does not use the download.

Useful when you only want the files collected once.

Supported files can be checked before downloading.

Preview is available for:

• Audio
• JPEG
• PNG
• GIF
• WebP
• PDF

Previewing:

• does not count as a download
• does not extend expiry
• does not consume an “Expire after first download” transfer

Potentially active formats such as HTML, SVG and JavaScript are not displayed as previews.

The secure file delivery app is designed with audio in mind.

• Audio is analysed to identify its actual format.
• WAV and AIFF may be stored internally using lossless compression.
• Downloads are reconstructed as genuine WAV or AIFF files.
• FLAC, MP3, AAC and Opus are not unnecessarily converted.
• Previewing has no effect on the original download.

Lossless storage optimisation reduces space without changing the audio content.

Suitable text-based files may also be compressed internally where useful.

This is lossless:

• the filename is preserved
• the file type is preserved
• the exact original contents are restored on download

Files that do not benefit are simply stored normally.

An optional password can be added to any transfer.

When enabled:

• recipients must enter it before accessing files or previews
• it is not stored in plain text
• the share link alone is not enough to open the transfer

For sensitive files, send the password separately from the link.

Current limits:

• 1 GB per individual file
• 2 GB combined per standard transfer
• 100 MB combined for a 30-day transfer

Limits are based on the original uploaded files.

Internal compression does not increase the upload allowance.

A transfer becomes unavailable when:

• its selected expiry time is reached, or
• its first download is used, if enabled

The service periodically removes transfers that are no longer needed.

If the same stored file is still required by another valid transfer, it is kept until the final reference is gone.

No.

Recipients open the private link and, if required, enter the transfer password.

Uploader access can be protected separately without affecting recipients.