How we keep your files safe

Files are stored in Google Cloud Storage and their details in Google Cloud Firestore. Both encrypt everything at rest, and every connection to ArchShare is encrypted in transit with HTTPS.

Your files are private by default. The storage behind them is never exposed: a browser is never given a storage address, only a short-lived link through our API that works for minutes, is tied to one file, and is checked again on every request.

• You set the rules: an expiry date, a download limit, one-time use, or a password.
• Only the people you name: restrict a link to specific email addresses. Each person confirms their address with a code before even the file names are shown — anyone else sees nothing.
• Revoke means revoke: switching a link off stops it at once, including downloads already in progress.
• You see what happens: every open and download is recorded per link, with the time and the kind of device.

With Secure send, files are encrypted in your browser with AES-256-GCM before they leave your device. The names, types and your message are encrypted too.

The key travels only after the # in the link — a part browsers never send to a server — or locked with a passphrase you give the recipient yourself (strengthened with PBKDF2, 600,000 rounds). ArchShare stores only scrambled data and cannot open it, even if asked to.

The trade-off: we cannot preview or recover these files, and a lost passphrase cannot be reset.

• Passwords are stored only as bcrypt hashes; we never see or keep the password itself.
• You can sign in with a password, a one-time code sent to your email, or Google.
• Settings show every recent sign-in, with the device and where it came from.
• Changing your password, or choosing “Sign out everywhere”, ends every other session at once.

Photos, video, audio and PDFs open in the browser. Anything that could run code — web pages, SVG images, scripts — is shown as plain text or downloaded instead, so a file someone sends you cannot run inside ArchShare.

Support staff work with separate accounts and only the permissions their role needs. Reading an account does not include opening its files or its share links, and every administrative change is recorded in an audit log. End-to-end encrypted transfers cannot be opened by anyone at ArchShare.

Deleted files and folders go to the trash first and their links stop working immediately. Deleting them from the trash removes them from storage. Deleting your account removes your account and your files; to have every remaining record about you erased as well, email us and we will do it.

Found a security issue? Please email axymoreshiya@gmail.com with the details. We will reply, keep you updated while we fix it, and credit you if you wish. Please do not access other people’s data or disrupt the service while testing.