Skip to content
Post-quantum encrypted

Designed to forget.

Everything you share disappears the moment you're done. No accounts. No traces. No compromises.

How it works

Simple by design. Gone by default.

No account. No app. No cleanup — for either of you.

  1. Add files

    Drop in a file or folder — up to 1 GiB (1 GB) per room, straight from your browser.

  2. Share a code

    You get a short code and a link. Send either one — that's the invitation.

  3. Watch it arrive

    They accept, it arrives, and when it's done, it's gone for good.

Philosophy

The best file transfer is the one that leaves no trace.

We built Tallow with a singular conviction: your data should exist only as long as you need it to. Your files are never written to disk — not by us and not by the browser. Room state lives in memory and is zeroized the moment it is no longer needed. This deployment keeps no record of the exchange either: the relay's admission rows and per-second byte totals — keyed by a hash of the room and of your address, chained so an edit would be detectable, and once kept for 30 days — are switched off, the relay process writes no journal lines, and the TURN service writes no session log. The moment your transfer completes the file is gone, and so is the record that it happened — we would rather tell you the record is gone than let you assume it was never there.

Capabilities

Everything a transfer needs. Nothing that keeps it.

Post-Quantum Encryption
ML-KEM-1024 key exchange with X25519 hybrid mode. Protected against both classical and quantum attacks. NIST Security Level 5.
Key exchange: ML-KEM-1024 (FIPS 203) + X25519 hybrid
FIPS 203
Zero Knowledge
In End-to-end mode the relay never sees your data — only you and your recipient can decrypt it. Room state lives in memory only, never written to disk.
Hardening (native relay/CLI): zeroize-on-drop · mlock · core dumps disabled
E2E Encrypted
No Account Required
Just open and transfer. No registration, no login, no personal data collected. Nothing to remember.
Zero Sign-Up
Browser-Based
Works everywhere with a modern browser. No installs, no extensions, no plugins. Just a link.
No Downloads
Built with Rust
Memory-safe cryptography written in Rust and compiled to WebAssembly. Secret comparisons use constant-time primitives, and the browser caveat is documented rather than glossed.
Rust + WASM
Chunked Streaming
Files are split into encrypted chunks and streamed directly as they arrive. Up to 1 GiB (1 GB) per room, nothing stored.
Streaming
Compare

How Tallow differs.

A direct comparison with app-first transfer tools.

Comparing with LocalSend

Feature comparison
Feature Tallow LocalSend Blip
Receiver needs an app No — any browser App (web client: same network only) Yes — both sides
Works across the internet Yes — relay + peer-to-peer No — local network only Yes
Files held by the service Never No server at all No storage — relayed when direct fails
Max size 1 GiB per room ← we lose here No service-side cap No limit
Client-side encryption Always in End-to-end mode (Transport-only is relay-carried) Direct, TLS built in mTLS over TLS 1.3 (as stated)
Post-quantum KEM ML-KEM-1024 hybrid docs → No No
Price Free — unlimited rooms Free Free non-commercial · $25/mo commercial
Open source No — source closed for now (publication deferred) Yes — Apache-2.0 No public source

Where we lose. Rooms cap at 1 GiB per room (LocalSend and Blip have no service-side size cap); our transfers need the relay reachable to start — LocalSend needs no internet at all; and our source is closed for now — publication deferred, not abandoned — while LocalSend's is fully open. That is the trade — the other columns are what it buys.

Questions

Asked & answered.

Do I need an account?

No. No sign-up, no email, no personal data — nothing to remember, and nothing to install.

Does the other person need Tallow?

No. Send them the link and they open it in any browser. No app, no account, no instructions.

What does it cost?

Nothing. Tallow is free to use — send as many transfers as you like.

Which devices does it work on?

Anything with a modern browser — phone, tablet, laptop, desktop. Nothing to install on either end.

How big can a transfer be?

Up to 1 GiB (1 GB — the same limit) per room. For anything larger, split it across a few rooms — each one disappears the moment it lands.

Where do my files go?

Only to the person you're sending to. Files are encrypted before they leave your device, and nothing is ever written to disk — there is no server copy to leak or delete.

What happens when the transfer is done?

The room self-destructs. The code stops working, everything held for the transfer is erased, and nothing is left behind — except the delivered file.

Is it really private?

Yes — by construction, not by policy. In End-to-end mode, files are sealed with post-quantum encryption before they leave your device, and only the person you're sending to holds the key. (Transport-only mode is relay-carried by design — no end-to-end encryption.) How the encryption works →

More questions? Everything's answered in the docs →

Just drop a file.

No account. No stored uploads. No waiting. Your file is encrypted in your browser and disappears after delivery.

Send Now
No sign-up required. Works in any modern browser.