About SendThings
How a room works
1. StartCreate a room. Add a password if you like.
2. ShareSend the code and password to the other person.
3. ApproveAllow people in when they ask to join.
4. Chat and sendSend messages and files right away.
Nearby
- Devices on the same network with SendThings open show up on the home page. Drop files on one to send them, or invite it into a room.
- Each room gives you a fresh name and coin. When someone asks to join, check that the same coin shows on both screens.
- Switch Visible off and nobody on the network can see you or send you files.
Files and folders
- Guest downloads try a direct connection, then use the host if needed.
- Folders keep their paths and download as one .zip.
- Downloads stay available while the sender stays connected.
Privacy and encryption
- Guests may see each other's network address when sharing files.
- Messages pass through the host. Device connections are encrypted with WebRTC DTLS.
- Our server only introduces devices. It never carries your messages or files.
- A password you choose is never sent to our server. Guests prove they know it to the host over the encrypted connection.
- The host lets each guest in, by approving them or by inviting them from Nearby. Hosts can turn approval off.
- No relay server: devices find a direct path with public STUN servers at Cloudflare and Google, which see your IP address. Strict networks may not connect.
What our server handles
- The room code, the names people use, whether the room has a password, and when the room ends.
- The connection details each device needs to reach the other. These include IP addresses.
- Join attempts, counted by a salted hash of your IP address. Room-code lookups, counted by IP address.
- For Nearby: a keyed hash of your public IP address (never the address itself), plus each device’s name, device type, operating system and browser. Invites expire after 60 seconds, and an invite’s one-time room secret passes through our server to the invited device without being stored.
- Room records are deleted when the room ends: when the host ends it, or 30 seconds after the host leaves and doesn’t come back. A room that nobody hosts expires after 2 hours.
On your device
- Received files are held in your browser while you are in the room: small ones in memory, larger ones in its private storage. Private-storage files are deleted 2 minutes after you leave, or cleaned up the next time you open a room.
- Your room password, name and signing key are kept for this tab’s room session only. Theme and Nearby visibility are saved in this browser.
- Each room gets a fresh name, coin and signing key. Hosts keep no remembered-device list.
Use on terminal
$ curl -fsSL https://sendthings.app/terminal | sh