Private file sharing, encrypted in your browser. Plus a free CDN for everything public.

Think of it as a dead-simple way to share files that doesn't creep on your data. When you upload through the site, your files are end-to-end encrypted in your browser first, so we can't read them. There's also a CDN side for public assets. That part isn't encrypted (public images have to be readable), but we strip the EXIF metadata so you aren't accidentally leaking your location.

Not the ones you share through the site. Those get encrypted with AES-256 in your browser before they leave your device, and the key rides in the part of the link after the #, which browsers never send to any server, so all we ever hold is scrambled bytes. Public CDN assets and anything sent through the developer API aren't encrypted though, since there's no browser holding a key, so those we can read. There's a full breakdown further down.

Yes. The free plan covers everyday sharing, and there are no ads on any plan. Paid plans raise the limits: bigger files, more active links, more CDN storage and custom link lifetimes. That's what pays the hosting bill.

Free accounts share files up to 50 MB and upload CDN assets up to 20 MB, with 300 MB of CDN storage. Max goes up to 100 GB per share, 2 GB per CDN asset, and 1 TB of CDN storage.

Depends on how heavy the file is. Small stuff stays up for 7 days, massive files get a shorter window, down to 24 hours. Paid plans multiply that and can set a custom lifetime from 1 minute to 30 days. CDN files? They're yours until you delete them.

Downloading needs nothing at all. Uploading uses an account, but not the usual kind: you pick a nickname and your browser generates a key. No emails, no passwords, no 'Sign in with Google' nonsense. If you lose that key, your account is cooked — we can't recover it because we never knew who you were.

Shares you upload through the site are encrypted end to end, filenames are encrypted at rest, files get random IDs on EU-based storage, and we never store IP addresses. CDN images get their EXIF/GPS junk stripped, and you can set shares to burn after the first download if you're feeling paranoid.

No, and it's worth being precise. Files you upload through the website are: your browser encrypts them before they leave your device and the key stays in the link, so we genuinely cannot read them. CDN assets are not encrypted at all, because a browser has to be able to display them. We only strip the EXIF and GPS metadata on the way in. Files uploaded through the developer API aren't encrypted either, because there's no browser in the loop holding a key, so we can read those. If you're using an app someone else built on our API, your files sit in their account and both they and we can see them. Ask them what they do with it.

Yes. The whole platform is public to read at github.com/HypaStack/Hypastack-Open-Source: the site, the API, the background services and the desktop app. It's published so you can check the privacy claims yourself instead of taking my word for it. It isn't open source though, and the licence is review only, so you can read and audit it but not run or reuse it.