Secure File Sharing, Explained.

Looslee is a free file-sharing service built for short-lived transfers. It encrypts files in the browser, creates a temporary share link, and closes the active transfer after a successful download or when the expiry timer ends.

Yes. The public transfer flow is free, with no subscription and no account required. You can upload, create a link, and share files from the main Looslee website.

No. Looslee's public transfer flow does not require an account, sign-up, or user profile. Open the site, choose your files, complete the security check, and create a secure link.

Open Looslee and select or drop your files into the upload area. Complete the Cloudflare security check, click Upload Files, wait for encryption and upload to finish, then click Generate Secure Link. Send the complete link or the displayed transfer code to the recipient.

Open the complete share link or enter the sender's 12-character transfer code on the Looslee homepage. Review the transfer details, enter a password if the sender enabled one, and choose Download Now.

Yes. Looslee works in modern mobile browsers on iPhone, Android phones, tablets, laptops, and desktop computers. A current browser and an internet connection are required.

The standard web application encrypts files in the browser with AES-256-GCM before upload. The full share link or transfer code must still be protected because anyone who obtains valid access details may be able to use the transfer. Do not use Looslee for files you cannot afford to lose.

Browser-side encryption means your browser encrypts the file before it is transmitted. Looslee's storage service receives encrypted bytes rather than the original file contents, while the decryption key stays with the share link.

AES-256-GCM is an authenticated encryption method. It protects the confidentiality of the file and helps detect tampering with encrypted data. Looslee uses it in the browser for the current encrypted transfer flow.

In the intended client-side encryption flow, the decryption key is held in the URL fragment, which browsers do not send to the server. Looslee stores encrypted transfer data, but no online service can promise that every underlying infrastructure copy is irrecoverable after deletion.

A transfer code is a 12-character alphanumeric code displayed in three groups of four characters, such as ABCD-EFGH-2345. It lets a recipient locate a transfer without manually opening the full share link, so treat it as private access information.

The full link is private access information. Keep it out of public posts and send it only to the intended recipient. The encryption key is carried in the URL fragment, but anyone with the complete link may be able to download the transfer.

The current public configuration supports up to 10 GB per session. The total size of all selected files counts toward the limit, and the upload interface is the source of truth if the configuration changes.

Looslee is designed for documents, photos, videos, audio, archives, code, design files, and other file types. Files are transferred as bytes rather than being resized or re-encoded.

Yes. Select or drag multiple files into the upload area. The current public browser accepts up to 50 files per transfer, subject to the total size limit and archive safety checks.

No. Looslee does not compress, resize, re-encode, or intentionally change your files. The recipient receives the original file bytes after decryption.

Yes. RAW photos, camera files, FLAC, WAV, AIFF, and other uncompressed formats can be transferred as long as they fit within the current session limit.

A transfer is designed for one successful download. After the download is completed, the active transfer is closed and later requests cannot use the same link.

The sender chooses an expiry period of 5, 10, 15, or 30 minutes. The transfer becomes unavailable when it is downloaded or when its timer expires, whichever happens first.

The active transfer closes when its expiry timer ends. Looslee makes best-effort deletion attempts, but the Privacy Policy does not promise certified or irrecoverable removal from every cache, backup, or third-party system.

Yes. The sender can cancel an active transfer from the generated-link screen. Once cancelled, the link is no longer intended to be usable.

Yes. Send the complete link, including the part after the # symbol. Messaging apps may create a preview, but the URL fragment is not sent to preview crawlers and is needed for browser-side decryption.

If you still have the transfer code, enter it on the Looslee homepage to resolve the transfer. If both the full link and transfer code are lost, Looslee cannot recover access for you.

Looslee does not use tracking, advertising, analytics, or personalization cookies. It uses one secure consent cookie to remember your Privacy Policy and Terms Of Service choice.

Standard web-server logs may contain IP addresses for a limited period, as is normal for an internet service. Looslee states that these logs are not analysed, sold, or shared for advertising.

The service needs encrypted file data, file size, transfer metadata, and an internal transfer identifier to route the upload and download. The public flow does not require an account or profile.

No. Looslee does not use file contents for advertising, build advertising profiles from transfers, or embed third-party tracking scripts for behavioural advertising.

An upload can fail because of an incomplete security check, a network interruption, a session-size limit, an unsupported browser state, or an archive safety rejection. Keep the page open, complete the verification, and retry with a stable connection.

Large transfers can take time because the browser encrypts data before sending it and the connection may vary during the transfer. Looslee uses chunked uploads, but final speed depends on your device, browser, network, and selected files.

The transfer may have expired, already been downloaded, been cancelled, or been opened with an incomplete or damaged link. Ask the sender for a new transfer if the original link is no longer active.

A decryption error commonly means the link fragment was removed or changed. Copy the complete link again, including everything after the # symbol, or use the original transfer code if it is still valid.

Check that the code has 12 letters or numbers in a 4-4-4 format, with no missing characters or extra spaces. A code also stops working when its transfer expires, is downloaded, or is cancelled.

The standard browser performs local safety checks on supported archives before upload. These checks look for excessive nesting, suspicious compression ratios, encrypted nested archives, recursion, and oversized expanded content.

No. A passing result only means the browser did not detect the patterns it checks; it is not an antivirus verdict. Scan downloaded files with trusted security software and treat unknown archives as untrusted before opening or extracting them.