Temporary file sharing that actually expires
Self-destructing file share with on-demand revoke · Updated May 2026
Send a file that auto-deletes after seven days. If you change your mind sooner, click the revoke link in the email we send you and it's gone in a second.
- 25 GB per file, no signup, browser only
- 7-day auto-expiry as an automated deletion
- One-click revoke from the confirmation email
- No Trash, no recover. Expired means gone
Most file-sharing tools default to permanent. Upload to Google Drive, Dropbox, or OneDrive and the file sits there until you remember to delete it, which you almost certainly won't. The few tools that do auto-expire (WeTransfer, SwissTransfer) hard-lock the expiry date and don't let you take a file back early. sto.care does both: every upload self-destructs after seven days, and a one-click email link kills it sooner if you change your mind.
DefinitionWhat temporary file sharing actually means
Temporary file sharing is the model where expiry is built in, not bolted on. The default for cloud storage is the opposite: a Drive or OneDrive upload stays live until you, an admin, or a retention policy goes back and ends it. Temporary sharing removes that step. The file ends on a clock, and you only touch it again if you want it gone sooner.
The distinction matters because human memory is a terrible retention policy. Stale shareable links from years prior are a recurring topic in Google's support forums, and Drive's own stop or change how a file is shared article confirms why: files don't auto-delete, and link access doesn't auto-expire. You have to find each file and revoke it by hand. Temporary sharing skips that step by making expiry the default.
MechanicsHow the 7-day auto-expiry works
When you upload a file, the browser uploads it straight to Cloudflare R2 (server-side encrypted with AES-256) and our API records the upload details with an expiry set to seven days from now. Both the file and the record have an automatic expiry path.
An automated expiry deletes the file on or shortly after its expiry timestamp; once that runs, the file is gone and any link pointing at it 404s. The record is cleaned up on the same schedule, and after deletion we keep only anonymous upload details (file name, type, size, timing, download count, a one-way hashed network identifier and a short generic description of the kind of file), never the contents. The result is no stale links and no long-tail archive of your files sitting in storage somewhere.
There's no "Trash" or "Recover deleted files" tier. Once it's gone, it's gone. That matters because it's the part most cloud storage gets wrong: Drive keeps deleted files in Trash for 30 days, OneDrive for 30 to 93, and the link can sometimes be re-enabled. With sto.care, expiry is destruction, not a soft-delete.
On-Demand RevokeKilling the link before the timer runs out
Auto-expiry on its own isn't enough. Sometimes you send the wrong file, or send the right file to the wrong person, or just change your mind ten minutes later. The fix is the confirmation email we send the sender when the upload finishes. That email contains a secure revoke link, signed with a token tied to the upload. One click and the file is deleted immediately, ahead of the automated expiry, and the upload is marked revoked.
You don't need an account to do this. You don't need to remember a password. You just need access to the email inbox you put on the upload form. If somebody is mid-download when you click revoke, their connection drops; the next try gets a 404. It's the closest thing to an "undo send" that file sharing offers.
Use CasesWhen temporary is the right default
Temporary sharing fits anywhere the file isn't meant to be a long-term artefact. A few cases where the trade-off is clearly correct:
- One-shot client delivery: a finished video, a signed contract, a render. The recipient downloads it, you both move on.
- Sensitive documents: tax forms, ID scans, medical reports. The shorter the link lives, the smaller the window for something to go wrong.
- Source files for a one-off collaboration: stems for a remix, raw photos for an editor, a PSD for a freelancer.
- Any file you'd rather not still be live in someone else's inbox a year from now.
Where temporary is the wrong default: anything you need indefinitely accessible (a portfolio, a public software release, a wiki). For those, persistent storage is genuinely better.
Lifecycle ControlWhen the file actually disappears
The "temporary" label hides three different behaviours. Some tools never expire and lean on you to remember (Drive, OneDrive). Some hard-lock the timer and ignore you when you change your mind (WeTransfer free, SwissTransfer). Some claim auto-delete and then keep the object in a 30-day Trash where the link can sometimes be re-enabled. The question we'd push you to ask is what happens at the moment the timer hits zero, and whether you get to move that moment forward yourself.
Two patterns sit behind that table. WeTransfer free and SwissTransfer give you a clean purge but no early kill switch: once you upload, you're committed to the timer. Dropbox Transfer trades the other way and gives you a dashboard kill switch, then routes the file through a 30-day soft-delete after expiry rather than a hard purge. We're trying to get both ends right: a one-click revoke from the confirmation email we already send you, and a hard purge the moment the timer or the revoke fires. No Trash, no recover, no second life.
PrivacyWhat we do and don't see
We move files between your browser and Cloudflare R2 over TLS, and R2 writes every object to disk with AES-256 server-side encryption under Cloudflare-managed keys. That's server-side, not end-to-end: we don't hold customer-managed keys, but the storage provider manages the keys, so a file could technically be read if compelled to. If that's a concern for what you're sending, an end-to-end-encrypted tool with client-side keys is a better fit. The Electronic Frontier Foundation's Surveillance Self-Defense guide walks through when each tier matters.
We don't use file contents for advertising or training. Uploads may be reviewed by sampling to detect and prevent abuse. We don't maintain a long-term archive of files, because the seven-day expiry deletes them. After that we keep only anonymous upload details (file name, type, size, timing, download count, a one-way hashed network identifier and a short generic description of the kind of file), never the contents, your email or a readable IP address. Email addresses are kept for 30 days at most.
Files are stored with our cloud infrastructure provider, Cloudflare R2, and we don't promise any particular storage country. If you need guaranteed data residency or protection from a specific jurisdiction, pick a tool that states it and can back it up.
FAQCommon questions
What does temporary file sharing actually mean?
It means the link you send has a real end date built in, not a vague "you can delete it later if you remember". On sto.care every upload self-destructs seven days after it's created. The file is deleted, the download link 404s, and there's nothing left for you to clean up.
How does the 7-day auto-expiry work under the hood?
Each upload is stamped with an expiry timestamp seven days from creation. An automated expiry deletes the file on or shortly after that timestamp, and the link stops working. After that we keep only anonymous upload details (file name, type, size, timing, download count, a one-way hashed network identifier and a short generic description of the kind of file), never the contents, your email or a readable IP address. There's no archive of the file, no soft-delete, no "recover for 30 days" tier.
Can I delete a file before the 7 days are up?
Yes. The confirmation email you get when the upload finishes contains a secure revoke link. Click it once and the file is gone, even if a recipient is mid-download. You don't need an account to revoke, just access to that email.
Is sto.care end-to-end encrypted?
No, and we don't claim it is. Files travel over TLS, and Cloudflare R2 encrypts them at rest with AES-256 using Cloudflare-managed keys. End-to-end encryption would require a key only you and the recipient hold, which we'd have to build a separate flow for. If that's the threshold you need, look at something like Tresorit or a self-hosted Cryptpad.
Where are the files actually stored?
Cloudflare R2 object storage. Traffic to and from storage is TLS, storage is private, and downloads are served through signed, expiring links. After seven days (or sooner, on revoke) the file is deleted automatically.
Are there limits I should know about?
Twenty-five gigabytes per file, twenty uploads per hour from the same IP, no monthly cap on transfers. Executable types like .exe, .sh, .bat, .ps1 and friends are blocked at the upload step to keep the abuse rate low. Everything else is fair game.
Send a file in seconds. Take it back any time.
UPLOAD A FILE →Looking at specific competitors? Read sto.care vs Google Drive for the persistent-storage trade-off, or sto.care vs WeTransfer for the locked-expiry one. There's also a longer guide to free file sharing without signup if you want the wider landscape.