Skip to content

What recipients see

A share's page is /share/{id}, where the ID is random. It shows the title, the message, who shared it, and its files.

Signing in

Anyone the share does not yet recognize sees a form asking for their email address.

  1. They enter their address and choose Send code.
  2. If the address has access, an email arrives with a 6-digit code and a sign-in link. Both work once, for 15 minutes. The page replies the same way whether or not the address has access, so it does not reveal who is on a share.
  3. They enter the code, or open the link, and are signed in.

An invitation carries a personal sign-in link that works once within 7 days. After that, the recipient signs in with a code at the share's address.

Opening a sign-in link shows a Continue button, and only pressing it uses the link. Mail scanners that open every link in a message cannot use it up.

Rate limits apply: three code emails per address every 10 minutes, five wrong guesses per code, and per-IP limits on code and link checks.

Accounts

A recipient with an account on the site logs in as usual and sees every share that admits them. That includes shares that name their account, their email address, or their address's domain.

An address that belongs to an account cannot sign in by email. Its owner must log in, so blocking the account shuts them out.

The session

Signing in by email starts a session that lasts 90 days and is extended each day it is used. It covers every share that admits the address. Shared with me at /share/mine lists them. Sign out ends the session.

The session uses its own cookie, scoped to /share, and never starts a Drupal session.

Files

Each file opens or downloads:

  • PDFs, images (PNG, JPEG, GIF, WebP) and plain text open in the browser.
  • Everything else downloads. SVG and HTML always download, because either can carry script.
  • Download next to any file always downloads it.

Inviting others

When the share allows it, a recipient can invite one address at a time. The invitee gets an invitation and becomes a recipient who can invite in turn. Recipients see who shared the files and who invited them, but not the other recipients.