Privacy

Last updated 2026.

What we collect

A random, unguessable session id in an httpOnly cookie — that's it. No name, no email, no password, no tracking pixels, no analytics scripts. The cookie only exists so this browser can see its own uploaded files.

What we store about a file

The file bytes, its original filename, size, MIME type, upload time, and a download counter. That's the entire record.

How long anything lasts

Every file is permanently deleted — from disk and from the database — 24 hours after upload, enforced by a sweep that runs every minute. If "self-destruct after first download" was enabled, it's deleted the moment the download finishes, even sooner than 24 hours. Deletion is irreversible; we cannot recover a file after either trigger fires.

Who can access a file

Anyone with the share link. Links use long random ids and are not indexed by search engines (share pages are marked noindex), but treat the link itself as the access control — don't post sensitive links somewhere public.

Third parties

Fonts load from Google Fonts. Nothing else leaves this server — no analytics, no ad networks, no third-party scripts touch your files or session.

Questions

Reach out via discord.gg/d3v.