Transparency
What we can see, and what we can’t.
You shouldn’t have to take our word for it. Here’s exactly what reaches us, how long we keep it, and how we handle reports of misuse.
By the numbers
Totals since we launched, updated every few minutes.
These are anonymous daily totals. They contain no link IDs, addresses, or messages.
What reaches us
What we can see
- That a link exists, when it was made, and when it expires
- How many times it can be opened, and how many times it was
- Whether it has a passcode or an email code, and how many wrong tries there were
- For files, the general kind (like a photo or a PDF) and the size
- A scrambled fingerprint of the network that created it, used only to stop abuse
- Your email address, only if you turn on email updates
- Your recipient’s email address, only if you lock a link to it
What we can never see
- Your message, or what’s inside your file
- File names
- Your passcode
- The key, which is the part of the link after the #
- Who you are. There are no accounts, cookies, ads, or tracking.
- Your IP address. It’s only ever used in scrambled form, for limits.
How long anything stays
- Your message
- Until it’s opened, destroyed, or expires (7 days at most)
- Your file
- Until the download finishes, or the link ends
- An answer to your request
- Until you open it, or 7 days
- Times and counts for tracking pages
- 7 days after the link expires
- Email address for updates
- Until the last email, or the link ends
- Recipient’s email, for “Only for this email”
- Until the link is fully opened or ends
- Limit counters
- 2 days
- Reports
- 90 days
- Feedback
- 180 days
- Daily totals
- Kept. They can’t identify anyone.
An automatic clean-up runs every hour. The full details are in our Privacy Policy.
If we’re asked for your data
We follow valid legal process. But we can only hand over what we have, and that’s very little: scrambled data we can’t unlock, and the times and counts listed above. Once a message is opened or expires, it no longer exists in our database. We can’t read messages for anyone, because we never had the key.
Who helps us run it
Safe With Us runs entirely on Cloudflare: the website, our servers, the database, file storage, and email. Our pages don’t load anything from any other company: no fonts, no analytics, no ads.
Check it yourself
- The key stays with you. On a computer, open your browser’s developer tools, go to the Network tab, and open a link. You’ll see the part after the # is never sent.
- Nothing else is loaded. Our pages only load files from safewith.us. A strict browser security policy blocks anything else, including trackers.
- Quantum-resistant requests. Requests and private replies combine a classic lock with ML-KEM, the US government’s 2024 quantum-resistant standard. The code is in /vendor/mlkem.js, unchanged from the open-source original and checked against the government’s official test results.
- The code reached you unchanged. Our Security page lists a fingerprint of every script we run and can check your browser’s copy for you. It also explains how to report a problem.
- Opened means gone. Send yourself a link that opens once, open it, then try it again. It won’t work a second time.
Questions about privacy?
We’re happy to answer them.
Email hello@safewith.us