Step 01
Upload as a guest or account holder
Guest uploads are available immediately. Anonymous accounts use a randomly generated recovery credential instead of an email address, username or password.
The complete path
How it works
See how an upload moves from private quarantine to a validated display copy, and how visibility settings control who can open it.
Step 02
Move the file into quarantine
Your browser sends the file over TLS to private quarantine storage using a short-lived, size-limited upload authorisation. Quarantine files are not publicly accessible.
Step 03
Check the file contents
The processing worker checks the file signature rather than trusting its extension, applies pixel and animation limits, and rejects malformed files.
Step 04
Remove embedded metadata
Display copies are re-encoded without EXIF data, GPS coordinates or camera details. The original quarantine file is removed after processing.
Step 05
Apply visibility and expiry settings
Public images can be indexed when enabled. Unlisted images use a secret link, while private images require the owner to be signed in. Expiry and NSFW settings are handled separately.
Step 06
Retain the links you need
Guest deletion and album-management secrets sit after the # in their URLs, so browsers do not include them in standard HTTP requests or referrer headers. Store these links securely.