Frequently asked questions

No. Guest uploads work immediately. A user account is accessed with a randomly generated credential, not an email address, username, or personal profile.

It cannot be recovered or reset because there is no email identity to prove ownership. Print or securely store the recovery card when the credential is shown.

Yes, while processing and serving them. The worker must decode images to validate and strip metadata, so this is not end-to-end encrypted storage. Access is limited by application controls and private object storage.

Public can be viewed by anyone and may be indexed only when enabled. Unlisted requires the secret capability link. Private requires the owning account session and is unavailable to guests as a true account-only mode.

Served copies are re-encoded without EXIF and GPS metadata. You should still inspect the visible pixels: a street sign or screenshot can reveal information that metadata removal cannot hide.

JPEG, PNG, WebP, AVIF, and GIF, including animated GIFs within configured frame and pixel limits. A filename extension alone is never trusted.

Guest deletion links contain a random secret after the URL fragment. Open the link and confirm deletion. The secret is submitted in the request body and is stored on the server only as a keyed digest.

Yes. Choose one hour, one day, one week, 30 days, or no automatic expiry. Expired images and their stored display versions are removed by a background cleanup process.

Marking an image or album as NSFW adds an interstitial before viewing. It is a safety label, not a license to upload prohibited content; the acceptable-use policy still applies.

Yes. Logged-in accounts can create a scoped ShareX profile and import its one-time configuration URL. Redeeming that URL rotates the upload token, and revocation takes effect immediately.

Public and unlisted images include a direct URL, Markdown, and WiresBB forum BBCode. An unlisted link contains a secret and stops working when the owner replaces it. Private images remain limited to the owning account and cannot be embedded on another website.

The longer part is a random access key, not the image ID. It prevents people from guessing unlisted links and cannot be shortened substantially without weakening that protection. New image and album IDs use a shorter 10-character format.

The product is designed without advertising profiles or user analytics identifiers. Short-lived keyed network hashes may be used for rate limiting and abuse prevention; raw addresses are not retained in application records.