FAQ
Answers to common questions about C-Drop.
Security
Are files encrypted and secure? ⌄
Yes. Files are transferred over HTTPS with TLS and stored encrypted at rest with AES-256. Your bucket is private and not publicly accessible — only someone with the link can access the file. For extra sensitive data, use Burn after read.
Who can see my files? ⌄
Only anyone with the link. Links use random IDs that are hard to guess, and files are not indexed or searchable. Admin access is protected.
Usage
How long are files kept? ⌄
Default is 1 hour. You can choose 10 minutes, 1 hour, 1 day, 7 days, or custom (minutes/hours/days up to 7 days).
What is Burn after read? ⌄
Delete after first download/view. Ideal for secrets, passwords, or one-time shares — the link returns 404 after the first fetch.
Limits & Storage
What is the max file size? ⌄
100 MB per file. Need larger? Self-host and increase the limit in your config.
Where are files stored? ⌄
Files are stored securely off-server on private cloud storage. This keeps the server light and reliable.
Is there a limit per IP? ⌄
Yes, there are fair-use limits to prevent abuse. If you make too many requests quickly, you will see a 429 error — just wait a moment and try again.
Can I use curl? ⌄
Yes — the API works with curl:
curl -F "file=@photo.jpg" https://cdrop.work.gd/api/upload
# {"id":"Ab3x9K","url":"/f/Ab3x9K"}
curl https://cdrop.work.gd/f/Ab3x9K -o fileHow do I delete a file? ⌄
Files delete automatically when they expire, or right after the first view if you used Burn after read. No account is needed.
Still stuck? Check Home.