Privacy is not a settings page. It is a property of a system in which there is nothing readable to scan, sell, profile or hand over.
“Nothing to scan, nothing to sell, nothing to hand over but ciphertext.”
For people and teams who object to their files being processed, classified or monetised by the service hosting them.
Content is ciphertext, so no automated system reviews it and no content-based account action can follow.
The business is subscriptions, not attention, so there is no incentive to learn about you.
We publish exactly what operational metadata we retain instead of claiming there is none.
Public links expire within 24 hours at most, with revocation at any time.
Storage regions and subprocessors are listed so you can decide before you upload.
Removing ciphertext when no key is retained leaves nothing to reconstruct.
Automated classification of uploaded content drives enforcement on large consumer services, and false positives fall on ordinary users: family photos, medical images, security research, legal exhibits. A service that cannot see content cannot act on it, which removes an entire category of risk to your data's availability.
Zero-knowledge protects content, not conduct. Abuse reports are handled through the mechanisms available without content access, and the limits of that are described in our published policies rather than glossed over.
Split link and passphrase across channels, strip metadata from documents and images before sharing, prefer per-recipient links over group links, and review your live links periodically.
We can only produce what we hold: ciphertext and operational metadata. We have no key that would turn that into readable content.
No. There is no advertising business, and encrypted content cannot be profiled.
No. Files are encrypted on your device with XChaCha20-Poly1305 before the upload starts, using keys derived locally with Argon2id. Our servers hold ciphertext only, so there is no preview, no scanning and no staff view of your transfer.
No. They open the link in any browser, type the passphrase you shared separately, and the file is decrypted locally on their machine. Nothing to install, nothing to sign up for.
Public share links always expire within 24 hours at most, and you can make them shorter, limit the number of views, or revoke them instantly. Expiry is enforced by the system, not by a reminder.
Uploads are chunked, resumable and verified after upload, so multi-gigabyte transfers survive a dropped connection, a closed laptop or a hotel network. You resume instead of starting again.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can test a real client hand-off before paying anything.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to store offline. That is the same property that keeps anyone else, including us, out of your account.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
