Private Link is the new default on the upload page. The file is encrypted in your browser before it leaves, and the key travels in the link itself, after the #. Browsers never send that part to a server, so we store bytes we cannot read — and cannot be made to.

The download page decrypts in the recipient's tab. It shows the real name and size only once the key from the link has opened them, and it refuses anything the server could have read. No account, no wallet, nothing to install.

Sending something sensitive? Add a password, and the server withholds the file without it — a leaked link alone then opens nothing. Or send the key separately from the link; the download page asks for it.

Signed in, choose "100% private" when uploading and the file lands in your storage with its key locked by your wallet vault. The vault is created with one signature of a fixed message; only the wallet that signed it can open the files, and we hold only locked keys. Lose the wallet and the files are gone — there is nothing on our side to reset.

Private links expire after 12 hours by default; 24 hours, 7 days and 14 days are still a click away. Expiry and deletion stop future downloads only — whoever already downloaded keeps their copy.

Your files now show how many times each one was downloaded. It is a count and nothing else: not who fetched it, not when, not from where — for a private file we could not tell you even if we wanted to. Paid files are the one exception, and always were: a purchase is a payment on Base, so the buyer's wallet, the amount and the receipt are public on-chain and show up under Earnings.

You can take a file off the marketplace without deleting it. It goes back to My files and keeps its link, its price and anyone who already bought it; it just stops being listed publicly, and you can list it again whenever you want.

Tidier file cards: Copy link stays on the card and everything else — price, marketplace, move, delete — moved into the ⋯ menu, with delete last and set apart from the rest. Each new feature had been adding another button until they wrapped into two rows.

Pro is $10 a month through September, half the usual $20. The plan is young and has not had its first subscriber yet, so rather than guess what it is worth we would like to make it easy to say yes. You get all of it — 1 GB per file, 20 GB of storage, and files that stay for as long as your subscription does. And if you take it you are doing more than buying storage: a paid plan is what lets a project this small keep building the next thing. Each month is paid on its own, so nothing renews behind your back, and any change to the price is written here first.

Nothing runs on private pages that could see a key: no analytics and no cookie prompt on the upload and download pages. The privacy policy, terms and docs describe what "deleted" means for a file we never had the key to.

Paid Link works exactly as before: a priced file still needs a key on our side so buyers can receive it after paying, so it is not end-to-end encrypted, and the upload page says so.

The API, the MCP server and the agent SDK are untouched — nothing you have automated needs updating, and no package to reinstall. Private Link is a browser feature in this release; files sent through the API keep the protection they have always had. Bringing Private Link to the packages is next on the list.

Release notes live behind the ✦ next to your wallet, on the home, transfer and dashboard pages, with a dot when there is something you have not read. The banner across the top is now used for one thing only: telling you a newer version is live while your tab is open.

File cards and the transfer page — menus and the expiry picker open downward instead of running off the top of the list. Dashboard modals — one look across all of them, with the destructive button in orange so it is never the one you hit by accident. Listing form — the fields are readable again. Dashboard home — private files show their lock and their real name here too, not only under Storage. Locked private files — acting on one offers to unlock the vault instead of quietly doing nothing. File cards — the download count sits in each file's meta line, next to its size.

Paid download pages (/d and /m) — a wallet that already bought a file is met with Download, not with Pay again. You were never charged twice, but you were asked to sign for nothing. Private Link download page — a wrong key or password can no longer be resent unchanged: the button waits for a change, and after five misses each further try waits a little longer. Private Link download page — the key field simply asks for the key; a whole link pasted there still works. Header on home, transfer and dashboard — the ✦ dot pulses gently until you have looked. Password fields on the transfer, upload and download pages — password managers no longer offer to save, fill or "update" a file password. It is not a login, and Chrome asking to update it over the vault dialog was the last straw. Dashboard upload — a private file uploaded while signed in now offers the same choice as the transfer page: send the whole link, or the link and the key by separate channels.