Security and privacy boundaries
This page explains what cpcp can protect and what it cannot. It does not provide end-to-end encryption and it is not absolute security.
The pickup code is the credential
A 6-digit pickup code is the whole credential. Anyone who obtains or guesses it can retrieve the parcel content; there is no account, second factor, or recipient allowlist.
No end-to-end encryption
cpcp does not use end-to-end encryption. The service can access content while it is in transit and in temporary storage. This is not encrypted transfer, and it is not absolute security.
Do not use it for passwords, keys, identity documents, medical or financial records, or other sensitive content.
Retention and deletion
- Parcels expire after one hour by default, and expiry is checked on each request.
- A scheduled job cleans up every minute; R2 file objects have up to 10 minutes of physical-deletion grace.
- After expiry, text, files, and parcel metadata are deleted together and cannot be recovered.
Rate limits and abuse protection
- Three consecutive failures from the same IP trigger a Turnstile challenge.
- Pickup and send both have hourly hard caps; requests over the cap return an error.
- Each parcel can be claimed successfully at most 10 times.
Content inspection
The app does not run automated content scans. We may inspect related content to investigate abuse or comply with the law.
Reporting a problem
Abuse reports, privacy requests, and vulnerability reports all go to hello@1tools.vip. Include the pickup code or link, when it happened, and steps to reproduce.
We handle mail as capacity allows and will try to reply, but there is no fixed SLA.