Everything you need to know about encrypted self-destructing file sharing with Looslee.
What is Looslee
Looslee is a free, encrypted file sharing service that creates a self-destructing link for your files. Upload any file, share the link, and it permanently deletes itself after the first download or when the timer expires — leaving zero trace behind.
Yes, completely free. No account, no subscription, no hidden fees. Upload files up to 10 GB and share instantly.
No. Zero accounts, zero sign-ups, zero personal information required. Open the site, drop your file, share the link. That's it.
Three things: (1) True end-to-end encryption — the file is encrypted in your browser before it even leaves your device, so not even Looslee can read it. (2) Self-destructing links — the file is permanently deleted after one download. (3) No account required — ever.
File Size & Types
Looslee supports transfers up to 10 GB per session. Files are split into encrypted 8 MB chunks automatically and reassembled on the recipient's end — you don't need to do anything special.
Every file type in existence. PDFs, videos, photos, audio, ZIP archives, executables, disk images, code files, 3D models, raw camera files, virtual machines — if it has an extension, Looslee can send it.
Yes. Drag and drop multiple files onto the upload zone. They'll be bundled together and the recipient downloads them all in one click.
Never. Looslee does not compress, re-encode, resize, or touch your files in any way. Every file arrives byte-for-byte identical to what you uploaded. Lossless, always.
.RAW, .CR2, .NEF, .DNG, .FLAC, .AIFF, .WAV — all work perfectly and arrive without any quality loss whatsoever.
Security & Encryption
Yes. Looslee uses AES-256-GCM encryption — the same standard used by governments and militaries. Crucially, encryption happens in your browser before upload, so the server never sees your unencrypted file.
End-to-end encryption means only the sender and recipient can read the file. The encryption key is generated on the sender's device and travels only in the share link. Our servers store only encrypted data — even if we were compromised, attackers would only see meaningless encrypted bytes.
No. The encryption key never leaves your browser. It lives only in the URL fragment (the part after #), which browsers never send to servers. We store only encrypted data and have no way to decrypt it.
It is permanently deleted. Not archived, not moved, not stored — deleted entirely from all storage systems. No copies are kept anywhere.
The file automatically deletes when the timer expires — at 5, 10, 15, or 30 minutes, whichever you chose. It is impossible for the file to exist beyond that time.
Yes. The link works everywhere. Note that WhatsApp and iMessage may generate link previews — the preview cannot reveal the file contents since the encryption key is in the URL fragment, which preview scrapers cannot access.
Technically yes, but practically no. The link only works once. The first person to open it and click download gets the file — then the link permanently dies. Anyone who opens it after that sees an expired link.
How It Works
When you click download, the server marks the transfer as used and immediately schedules file deletion. The link returns a 410 Gone error for any subsequent requests. There is no override for this.
Files are stored in encrypted form only. The server receives only encrypted bytes — it never sees the original file. Storage happens in secure infrastructure, and files are automatically deleted after download or expiry.
That is the encryption key. The part of the URL after # is called a fragment. Browsers never send the fragment to servers — it exists only in the browser. This is how we ensure the decryption key is never exposed to our servers.
Yes. Looslee works on any device with a modern browser — iPhone, Android, iPad, desktop, laptop. No app to install.
No. An internet connection is required to upload and download files.
Troubleshooting
The link has either expired (time ran out) or been downloaded already (one-time use). Looslee links cannot be recovered once gone.
Upload speed depends on your internet connection. Looslee uses chunked parallel uploads to maximise speed. For very large files, the encryption step may take a moment before upload begins.
This happens if the URL was modified or the # key part was cut off when copying. Make sure you copy the complete link including everything after the #. If you shared via an app that truncates links, try a different sharing method.
Yes. Looslee uses standard HTTPS and works on any network that allows web traffic.
No. Upload as many files as you need.
Privacy
Standard server logs may contain IP addresses as is normal for any web service. We do not store, analyse, or sell this data. Files themselves are encrypted and inaccessible.
No tracking cookies. No analytics tracking your behaviour. No advertising network.
Files are encrypted client-side and deleted after download or expiry. We do not store personal data beyond what is technically necessary for the transfer.
ZIP Bomb Protection
A "ZIP Bomb" (also known as a decompression bomb or archive of death) is a malicious archive file designed to crash or render useless the system reading it. It is usually extremely small when compressed, but expands to hundreds of gigabytes or even petabytes, consuming all memory and disk space. Looslee performs automatic, recursive, client-side scanning on all uploaded archives to detect and block these attacks before any data is sent.
We apply five robust rules to verify that archives are safe:
1. Maximum Archive Depth: We limit nested archives (ZIPs inside ZIPs) to a maximum of 5 layers. Archives nested deeper are blocked to prevent stack overflows and recursion loops.
2. Maximum Compression Ratio: We block files larger than 1 MB that have a compression ratio exceeding 100:1. Normal files rarely exceed this, while zip bombs rely on extreme ratios (often 1000:1 or more) to hide large blocks of repeating data.
3. Encrypted Nested Archives: We reject archives that contain encrypted zip files nested inside them. Because their contents cannot be decrypted and scanned by the client, they could be used to smuggle malicious zip bombs.
4. Nested Archive Recursion: We recursively inspect nested archive files to verify they do not contain self-referencing links or infinite loops designed to hang the decompression engine.
5. Huge Expanded Sizes: We calculate the cumulative uncompressed size of all files across all nested layers. If the total expanded size exceeds our transfer size limit (10 GB), we reject the archive to protect the recipient's system.
No. Normal ZIP files containing documents, code, photos, or media will not be affected. These files typically have compression ratios far below 10:1 and do not exceed our nesting depth or size limits. The rules are designed specifically to target the highly anomalous patterns unique to zip bombs, ensuring standard archives work perfectly.