Can PaperPilot see my files?

No. SecureShare decrypts files on your device. The server delivers encrypted metadata and encrypted chunks, but does not receive your decrypted content.

What does “end-to-end encrypted” mean here?

The file is encrypted by the sender and can only be decrypted by someone with the share link (and password, if set). Decryption happens locally in the viewer.

Do you store my password?

No. If a share uses a password, the viewer derives a key locally (Argon2id) and uses it to unwrap the file key and decrypt chunks.

Why can’t I find share pages on Google?

Share pages under /s/ are marked noindex and sent with X-Robots-Tag headers to prevent indexing. This reduces accidental discovery of sensitive links.

Can I set an expiration or view limit?

Yes. Shares can be configured to expire or become invalid after certain conditions. When a share expires, the viewer will no longer be able to fetch the encrypted chunks.