# Secure File Transfer

> Send files, messages, and links directly between devices. P2P encrypted, no server storage, no sign-up.

## What is this?

Secure File Transfer (huskyhaul.online) is a free, browser-based tool for transferring files, text messages, and URLs directly between two devices using WebRTC peer-to-peer connections.

## Core Features

- **P2P Transfer**: Files go directly between devices via WebRTC DataChannel. The server only handles signaling (connection setup).
- **End-to-End Encryption**: All transfers use DTLS encryption. Even TURN-relayed transfers remain encrypted – the relay server cannot read the content.
- **No Server Storage**: The server never stores files, messages, or URLs. It only keeps share metadata (code, status, TTL).
- **No Registration**: Open the page and start sharing immediately. An anonymous device identity is created automatically.
- **Share Code**: Sender gets a short code (e.g., AB3X7K). Receiver enters the code or opens a link to start receiving.
- **Cross-Platform**: Works in any modern browser – Chrome, Firefox, Safari, Edge, mobile browsers.
- **Custom TURN**: Users can configure their own TURN server for relay transfers without limits.

## How It Works

1. Sender opens the app, selects a file / types a message / pastes a URL, and clicks "Create link".
2. The app generates a short share code and waits for a receiver.
3. Receiver enters the code (or opens the link) on their device.
4. A WebRTC peer-to-peer connection is established between the two browsers.
5. Data is transferred directly. The server is not involved in the actual transfer.

## Privacy Model

- All content is transferred peer-to-peer; the server never sees it.
- Cryptographic device identity (ECDSA key pair) is generated in the browser and stored in IndexedDB. The private key is non-extractable.
- Every API request is signed with the device's private key (anti-replay with nonce + timestamp).
- No cookies, no external analytics, no tracking.

## Technology

- Frontend: React, TypeScript, Vite, Tailwind CSS, Zustand, WebRTC, WebCrypto API
- Backend: Go, Chi router, PostgreSQL, Redis, nhooyr/websocket
- Infrastructure: Docker Compose, Nginx, coturn (TURN relay), Let's Encrypt

## Links

- Website: https://huskyhaul.online
- Privacy Policy: https://huskyhaul.online/privacy/
- Terms of Service: https://huskyhaul.online/terms/

## FAQ

### Is it free?
Yes, completely free. No registration, no payment.

### Is there a file size limit?
No limit for direct P2P transfers. Relay transfers through the server TURN are limited to 10 MB per file.

### Do both users need to be online?
Yes. Both sender and receiver must have the page open simultaneously.

### Can I send to multiple people?
Each share code connects one sender to one receiver at a time. After a transfer completes, the share becomes active again for the next receiver.

### Is it open source?
The project is not open source at this time.