Transparency
How retention and deletion work
FilePaste is a simple share-by-link tool. This page explains what happens to your data from upload to deletion.
What happens when I upload something?
Your text or file is stored in a single cloud storage object. A random 8-character link is generated. The object is tagged with the access window you chose (1 hour, 1 day, 7 days, or 30 days).
When does the link stop working?
After the chosen access window passes, the link returns a "410 Gone" response. Anyone who tries to open it sees that the share has expired.
Is the data deleted immediately when the access window ends?
No. FilePaste uses lazy deletion. When someone tries to access an expired link, the server checks the timestamp, deletes the stored data from cloud storage, and then returns the expired response. This means data may persist in storage for a period after the access window ends, until the link is next accessed.
What if nobody accesses an expired link?
The stored data remains in cloud storage until someone accesses the link or the storage provider's own lifecycle policies apply. FilePaste does not run a background cleanup job. If you need guaranteed immediate deletion, use a different service.
Who can access my share?
Anyone with the link. There is no authentication, no passwords, and no access control list. Do not share sensitive data unless you are comfortable with this model.
Is my data encrypted?
Data is stored in cloud object storage, which encrypts data at rest on the provider side. However, there is no end-to-end encryption. The server can read the content. Do not treat this as private or encrypted storage.
What is the maximum upload size?
25 MB per share. This applies to both text and file uploads.
Can I delete a share before the access window ends?
No. There is no delete button or dashboard. If you shared something by mistake, the access window is the only way the share eventually becomes inaccessible.