FAQ · Answered here, not hidden

FAQ

Discovery, pairing, quotas, and firewall questions.

I cannot discover any device

Check that both ends are on the same LAN, AP isolation is off, and port 39551 is open; otherwise connect by manual IP.

Does it work offline?

Yes. Local mode needs no internet — same LAN or near-field is enough, and no server sits in the default path.

Do I restart after an interrupted transfer?

No. A resumeToken continues it. Data lands in a .ssnd.partial file and is renamed atomically only when complete.

Why compare SAS digits?

To stop a man in the middle. Matching digits prove both sides saw the same handshake transcript; any mismatch should abort.

Is TLS not enough?

TLS protects the channel but does not prove the peer is the device you think it is. ADR-001: TLS cannot replace app-layer SAS.

Can the relay see my files?

No. It forwards ciphertext while app-layer E2EE sits above it, though relay metadata (timing, size) is visible.

Can I revoke one device?

Yes. Device ids derive from public keys, so revocation is per device and leaves other pairings intact.

Would a leaked long-term key decrypt past sessions?

No. Long-term keys only sign and never feed key derivation; session keys come from ephemeral X25519, so forward secrecy holds.

What is the Free limit?

A 2 GiB soft cap per send and 100 history rows. Local transfer itself works on every plan.

What am I actually paying for?

Cross-net relay, higher quotas, audit export, and faster support — not for unlocking basic file sending.

Any ads or data monetisation?

None. ADR-010 bans ad SDKs; that is an architecture decision, not a business experiment.

Are there official Linux packages?

Not in v1.0. The engine is Apache-2.0, so you can build it yourself (cargo build --release).

When does iOS ship?

iOS / iPadOS 15+ is planned, distributed via App Store / TestFlight soon after the initial release.

Is my data uploaded anywhere?

Not on the default path. Local mode has no server; only Connected features you switch on use the relay.

Is the engine open source?

Engine and protocol are Apache-2.0 and open for review; the official clients are proprietary. Full notes live in the repo docs/.

Why no security audit badge?

The independent audit has not happened yet. ADR-010: until it ships, no audit badges and no fake PDF reports.

Still stuck

Still missing an answer?

Export a log bundle from diagnostics (no private keys), or follow the troubleshooting order in the docs.

Network → firewall → port 39551 → version parity.

Threats, defenses, and what we cannot do.

The client runs Local by default. Read the security model in two minutes if you prefer.