Privacy & transfer details
Endez lets you upload up to 10 files totaling 10 GB and share one download link. Send folders as ZIP files. You must verify your email before uploading or creating short links. You can also shorten a public website URL and share the resulting Endez link.
What we store
We store your files, their names and sizes, and the timestamps needed to operate your transfer. Your email is used to send verification codes through Mailgun and establish a verified session. Before starting a new upload or creating a short link, Cloudflare Turnstile checks for automated abuse. Cloudflare processes browser and device signals, network information including your IP address, and a short-lived verification token. The server validates the token before allowing creation. Mailgun processes the recipient address, verification email content, and delivery events. Transfers and short links are associated with a hashed email identifier. For short links we store the destination URL, a random link code, and the creation time. Opening a short link redirects the visitor to its destination; Endez does not fetch or check the destination. Hashed network identifiers are used for rate limits. Endez uses one essential, secure session cookie, which expires after 24 hours. We do not use advertising cookies.
Who can download
Anyone with the complete share link can download your files. Treat the link as private, and share it only with your intended recipients. Files are stored in private Amazon S3 storage in the United States and encrypted in transit and at rest. This is not end-to-end encryption.
Short links
Short links do not expire automatically. Anyone with a short link can visit its destination, so do not shorten URLs containing information you do not intend to share. Shortening a URL does not change access permissions at the destination. We do not provide click analytics.
File expiration
Download links expire seven days after a successful upload. New download requests are refused at expiration. An already issued download URL remains valid for at most five minutes and never beyond the link’s expiry, although a download already in progress can continue. S3 schedules stored files for deletion after seven days; physical deletion is asynchronous. Incomplete uploads are scheduled for cleanup after one day. Verification codes expire after ten minutes, and metadata is automatically cleaned up after expiration.
Operational logs are retained for 14 days. Metadata backups may persist for up to 35 days. Logs are configured not to record verification codes, session cookies, file contents, or share links.
Service limits
To limit abuse, verified senders may start up to three transfers per UTC day. A transfer supports up to 100 download requests per UTC day, shared across all files in the transfer. Verified users may create up to 20 short links per UTC day. Email requests and verification attempts are also limited. Downloads are not screened for malware; open files only from senders you trust.
Your responsibilities
Only upload files you have the right to share. Do not use Endez to distribute unlawful, harmful, or abusive content. Keep your own copy of important files; Endez is temporary transfer storage, not a backup service.