your stuff is your stuff.

echo·link is self-hosted, indie, and ad-free. there are no third-party trackers, no analytics pixels, no telemetry of any kind on this site. nothing leaks to anywhere.

what we store

when you upload a file, we store the file itself in our object storage (S3-compatible, self-hosted), plus a database row with: a UUID, the file's MIME type and size, a generated title, an expiry timestamp, and — depending on whether you're logged in — your account ID or a salted hash of your IP (for anonymous rate-limiting only). we do not store the raw IP address.

when you sign in, we store your email, the magic-link tokens we issue, and a long-lived session cookie scoped to this domain. nothing about your magic-link request leaves our mail server.

what we don't store

• your raw IP address (only a salted hash, only for anonymous uploads)
• browser fingerprint, device info, location
• any third-party cookies
• any analytics or tracking events

expiration

anonymous uploads expire after 24 hours, hard. authenticated uploads expire after the configured window (10 days by default). expired files are deleted from both storage and database every night at midnight UTC.

deletion

from /app, you can delete any file you own. the file is removed from storage and the database synchronously. there are no backups or soft-deletes — gone is gone.

questions?

this is open source. you can read every line at the github repo, or just self-host it.