Use case · Privacy
Share a file without leaving a chat history
No friend requests and no group chat. Files sit briefly on the server and expire after one hour; storage is cleared within 10 minutes after that. To be clear: cpcp is not end-to-end encrypted, so do not send confidential files.
How it works
- Open cpcp on the sending device, then paste text or choose files.
- Seal the parcel to get a 6-digit pickup code, and pass it on through a channel you trust.
- The file and the code expire after one hour; storage is cleared within 10 minutes after that.
When it fits, and when it doesn't
- Fits: sending a colleague a non-sensitive document for a moment.
- Fits: you do not want the file to stay in a chat history or mailbox.
- Fits: you do not want to create an account or add a contact for a one-off transfer.
- Does not fit: ID documents, keys, or financial data.
- Does not fit: files you need to keep, audit, or download repeatedly.
The privacy boundary, stated plainly
cpcp is not end-to-end encrypted. Files exist briefly on the server, and the service can technically read them. Pickup codes, rate limits, and Turnstile make enumeration expensive, but that is not cryptographic privacy.
- Files expire after one hour and can no longer be picked up; storage is cleared within 10 minutes after that and cannot be recovered.
- The pickup code is the only credential. Anyone with the code can take the file, so share it over a channel you trust.
- No account, no contact list, and no chat history are created.
- We do not run automated content scans or sell data. We may review related content to investigate abuse or comply with the law, and the server should still be treated as able to read the file.
Frequently asked
Is cpcp end-to-end encrypted?
No. Files sit briefly on the server, which can technically read them. Do not use it for confidential files.
How long are files kept?
They expire after one hour and can no longer be picked up; storage is cleared within 10 minutes after that and cannot be recovered.
Do you look at or sell my files?
We do not run automated content scans or sell data. We may review related content to investigate abuse or comply with the law. This is not end-to-end encryption, so the server should still be treated as able to read the file.