zero-knowledge by design
We can't read your files.
That's the whole point.
Every file is encrypted in your browser before it's uploaded. We store ciphertext, wrapped keys, and nothing else — not your plaintext, not your filenames, not your encryption keys.
How it works
Encrypt locally
Pick AES-256-GCM or ChaCha20-Poly1305. Your browser encrypts the file in 4 MiB chunks before anything is sent.
Wrap the key
A fresh key per file is wrapped under your public key (RSA-OAEP or ECDH). We only ever store the wrapped ciphertext.
We stay blind
Filenames and metadata are encrypted too. Every access is logged, but the log never contains key material or content.