Terms & privacy
The short version, because there isn't a long one.
What you can upload
Audio files, and ZIP archives that contain audio. Everything else is rejected by signature check, not by file name. Don't upload anything you don't hold the rights to, anything illegal, or anything designed to harm whoever opens it.
How long files live
Exactly as long as the expiry you picked. When a link expires, a background job deletes the file from disk — it isn't merely hidden. Files set to burn after download are deleted the moment they're fetched.
What's stored about you
Uploading here needs no account, and there are no tracking cookies and no analytics. The server keeps a one-way hash of your IP address so it can enforce rate limits and handle abuse. It never stores the address itself, and the hash is useless outside this server.
Accounts, and the desktop app
The desktop app has accounts: a username, an email and a password. Projects, folders, invites and the people you share with all live behind that. The server stores your email so it can send you a sign-in code, and a one-way hash of your password — never the password itself.
Audio in an account is encrypted before it is uploaded
Each track is encrypted on your own machine with its own key, in authenticated chunks. Only ciphertext reaches this server, and nothing here can open it.
That key is kept two ways: sealed to each device you authorise, and wrapped under a key derived from your account key. The second copy is what lets a track survive losing every device — you sign in on a new machine and it opens. It also means that anyone who has your password and can read your email can reach your audio. That is the trade for not losing everything when a laptop dies, and it is worth knowing rather than discovering.
A recovery key you choose is the way back if you forget the password and lose the email with it. Nobody here can reset it for you, because nobody here can open it.
Share links carry their own key
The key for a shared track travels in the part of the URL after the #, which browsers never send to any server. That is how someone without the app can play an encrypted track while this server still cannot. Anyone with the whole link can play it, so treat it as the secret it is — and some chat apps trim the fragment, which is why a link that was pasted carelessly may not work.
Plugins run on your computer
Plugins are small Python programs, reviewed and published here, that run on your own machine with your own permissions — not on this server. They are given a narrow local door into the app so they can have a file encrypted and uploaded, and nothing else. They are not sandboxed, and installing one is the same kind of decision as running any other program you downloaded.
The Discord bot
Audio sent to the AudioShare bot is uploaded the same way the box on this site uploads it: anonymously, with a share link back. Nothing goes into an account that way, because this server has no key to encrypt anything into one. If you link Discord to your account and have AudioShare running, your own machine collects the file instead and puts it in a project.
Share links
A link holds 131 bits of randomness, so it can't be guessed or enumerated. Anyone with the link can open the file — treat it as the secret it is, and add a password for anything sensitive.
Abuse
Every share page has a report button. Files attracting multiple independent reports are taken offline automatically pending review, and removed if the report holds up.
No warranty
This is a free service with no uptime promise. Keep your own copy of anything you care about.