dragonfly.zip

Share a file.
Get a link.

Encrypted in your browser. No accounts. No tracking. Links auto-expire after 30 days of silence.

What our server can see (E2EE on)
Zero-knowledge
  • File bytes
    AES-GCM ciphertext only. Key never leaves your browser.
    Hidden
  • File name
    Stored so download link can suggest a filename.
    Visible
  • File size (ciphertext)
    Byte length of the encrypted blob.
    Visible
  • MIME type
    Stored as application/octet-stream; original type lives in the key holder's browser.
    Hidden
  • Uploader identity / IP logs
    No accounts, no analytics, no request logs beyond edge defaults.
    Hidden
  • Decryption key
    Lives in the URL #fragment. Browsers never transmit fragments.
    Hidden

How it works

  1. 01
    Encrypted in your browser
    AES-GCM 256 runs via WebCrypto before a single byte leaves your device. The key stays in the URL fragment — browsers never send fragments to servers.
  2. 02
    Stored on Cloudflare R2
    Ciphertext lands in a private R2 bucket, encrypted at rest. Downloads require a fresh, short-lived signed URL.
  3. 03
    No accounts, no tracking
    No sign-up, no analytics beacons, no identifying cookies. Metadata is limited to filename, size, and expiry.
  4. 04
    Auto-expiring by default
    Links expire after 30 days of no downloads. Active links keep rolling forward.