Skip to content

2025

2025 in review

Trash, export, Sofia, and a security fix we are glad someone found before it mattered. A quieter year by design. The product is close to what we set out to build in 2021; from here the work is mostly keeping it running and opening a zone when a region asks for one.

Unicode file names in the export manifest

A short fix: file names with accented or non-Latin characters were being written to the export manifest in a normalised form that did not always match the file inside the zip. They now match byte for byte. Existing exports are unaffected; re-export if you want a clean manifest.

Advisory: share token length increased

A security researcher pointed out that our share tokens, while random, were shorter than they needed to be. We lengthened them and the change is invisible to you: old links keep working until they expire, new links are longer. No links were guessed; this is defence in depth. Thanks to the reporter, who asked to stay anonymous.

On not inventing numbers

We get asked for a customer count for the website. We will not put one up. Not because it is embarrassing, but because the moment you publish a round number you start optimising for it, and we would rather optimise for files that come back the same as they went in. The only numbers on the site are the real limits and the live measurements on the status page.

Trash, and then account export

Two things studios kept asking for. Deleted files now sit in a trash for seven days before they are really gone. And you can download your whole account as one zip with a manifest, any time, without asking us. Both are in the console and the API.