Last updated: August 24, 2026

This page describes, without marketing gloss, the measures that protect files shared through ShareIt.onl and the exact lifecycle of every share. For what data we collect about you, see the privacy policy.

Security measures

  • TLS everywhere. Uploads, share pages, and downloads all travel over HTTPS; files are stored with an established cloud object-storage provider in the United States, behind our own branded delivery domain.
  • Unlisted random links. Every share lives at a randomly generated address that is never listed, published, or submitted for search indexing.
  • Optional password protection. A password-protected share cannot be opened without the password, even with the link.
  • One-time links. "Delete after first download" destroys the files the moment the first download completes.
  • Automatic expiry. Every link has a built-in lifetime; an automated cleanup sweep runs every 15 minutes and permanently deletes expired files from storage.
  • Automated malware screening. We may screen uploads with automated malware-reputation checks and remove flagged files. This is not a real-time antivirus scan of every file, so treat downloads from people you don't know with normal caution.
  • Human abuse review. Abuse reports and DMCA notices are reviewed by a person; offending shares are removed and repeat abusers are blocked. See the Acceptable Use Policy.
  • Delivery logs. Uploads, downloads, and share-page views are logged (details below), which lets us investigate abuse after the fact.

To be equally clear about what we do not claim: files are not end-to-end encrypted, and we do not claim encryption at rest. Our team can access files when reviewing an abuse or copyright report.

When files are destroyed

Share settingFiles are permanently deleted
1 hourWithin 15 minutes of the link expiring, 1 hour after upload
12 hoursWithin 15 minutes of expiry, 12 hours after upload
24 hours (default)Within 15 minutes of expiry, 24 hours after upload
3 daysWithin 15 minutes of expiry, 3 days after upload
7 daysWithin 15 minutes of expiry, 7 days after upload
30 days (signed-in members)Within 15 minutes of expiry, 30 days after upload
One-time linkImmediately after the first download completes
Deleted from a member dashboardImmediately

The keep-alive rule: each download extends a live link by 24 hours from that download, so a share that is actively being used stays up; once downloads stop, it expires and the cleanup destroys the files on the schedule above.

What we log, and why

  • Upload records (share token, file names and sizes, upload time, uploader IP, user agent) - Kept after the files are deleted, so abuse can be investigated and legal obligations met.
  • Download logs (time, file, downloader IP, country, user agent) - Abuse prevention and, in aggregate, the stats members see in their dashboard.
  • Share-page views (time, IP, country) - Abuse prevention and aggregate stats.

Retention and your deletion rights for these logs are covered in the privacy policy.

What we cannot do

Deletion here is real: once a share expires, is used up, or is deleted, the files are gone from storage and cannot be recovered - Not by you, and not by us. Keep your own copy of anything you upload. We also cannot un-send a link: anyone who downloaded a file before the link expired keeps their copy.

Found a security problem or an abusive share? Report it via the report abuse form or email [email protected]. See also the terms of service and acceptable use policy.