Privacy

Share without an account

A one-off link requires no name or email address.

Pictures and metadata

The shared copy is converted to WebP and stripped of EXIF metadata before it is served through the link.

Without an account, an individual link stops working after 30 days. Photos attached to an account do not expire, although any link can still stop working after owner deletion or burn-after-read.

Visibility and control

The /p/ and /a/ links are unlisted, excluded from the sitemap, and marked noindex. Anyone who knows an address can still forward it or save what they see.

Owners can disable a share from their session or account. A password and burn-after-read reduce exposure but cannot prevent a recipient from making a copy.