Skip to content

Designed to forget.

Everything you share disappears the moment you're done. No accounts. No traces. No compromises.

Simple by design. Gone by default.

No account. No app. No cleanup — for either of you.

  1. Add files

    Drop in a file or folder — up to 1 GiB (1 GB) per transfer, straight from your browser.

  2. Share a code

    You get a short code and a link. Send either one — that's the invitation.

  3. Watch it arrive

    They accept, it arrives, and when it's done, it's gone for good.

The best file transfer is the one that leaves no trace.

We built Tallow with a singular conviction: your data should exist only as long as you need it to. Nothing is written to disk. Ever. Room state lives in memory and is zeroized the moment it is no longer needed; the relay's operational log records only request metadata — timestamp, method, path, status, latency and bytes — with IP addresses stripped before anything is written. The moment your transfer completes, everything is gone — as if it never happened.

Everything a transfer needs. Nothing that keeps it.

Post-Quantum Encryption
ML-KEM-1024 key exchange with X25519 hybrid mode. Protected against both classical and quantum attacks. NIST Security Level 5.
Key exchange: ML-KEM-1024 (FIPS 203) + X25519 hybrid FIPS 203
Zero Knowledge
In End-to-end mode the relay never sees your data — only you and your recipient can decrypt it. Room state lives in memory only, never written to disk.
Hardening: zeroize-on-drop · mlock (no swap) · core dumps disabled E2E Encrypted
No Account Required
Just open and transfer. No registration, no login, no personal data collected. Nothing to remember.
Zero Sign-Up
Browser-Based
Works everywhere with a modern browser. No installs, no extensions, no plugins. Just a link.
No Downloads
Built with Rust
Memory-safe, constant-time cryptography compiled to WebAssembly. No undefined behavior. No shortcuts.
Rust + WASM
Chunked Streaming
Files are split into encrypted chunks and streamed directly as they arrive. Up to 1 GiB (1 GB) per room, nothing stored.
Streaming

How Tallow differs.

A direct comparison with app-first transfer tools.

Comparing with LocalSend

Feature comparison
Feature Tallow LocalSend Blip
Receiver needs an app No — any browser App (web client: same network only) Yes — both sides
Works across the internet Yes — relay + peer-to-peer No — local network only Yes
Files held by the service Never No server at all No storage — relayed when direct fails
Max size 1 GB / room ← we lose here No service-side cap No limit
Client-side encryption Always in End-to-end mode (Transport-only is relay-carried) Direct, TLS built in mTLS over TLS 1.3 (as stated)
Post-quantum KEM ML-KEM-1024 hybrid docs → No No
Price Free — unlimited rooms Free Free non-commercial · $25/mo commercial
Open source AGPL-3.0 — publishing 2026-10-01 Yes — Apache-2.0 No public source

Where we lose. Rooms cap at 1 GB (LocalSend and Blip have no service-side size cap); our transfers need the relay reachable to start — LocalSend needs no internet at all; and our source is AGPL-3.0 but not yet published, while LocalSend's is fully open. That is the trade — the other columns are what it buys.

Asked & answered.

Do I need an account?

No. No sign-up, no email, no personal data — nothing to remember, and nothing to install.

Does the other person need Tallow?

No. Send them the link and they open it in any browser. No app, no account, no instructions.

What does it cost?

Nothing. Tallow is free to use — send as many transfers as you like.

Which devices does it work on?

Anything with a modern browser — phone, tablet, laptop, desktop. Nothing to install on either end.

How big can a transfer be?

Up to 1 GiB (1 GB) per transfer. For anything larger, split it across a few transfers — each one disappears the moment it lands.

Where do my files go?

Only to the person you're sending to. Files are encrypted before they leave your device, and nothing is ever written to disk — there is no server copy to leak or delete.

What happens when the transfer is done?

The room self-destructs. The code stops working, everything held for the transfer is erased, and nothing is left behind — except the delivered file.

Is it really private?

Yes — by construction, not by policy. In End-to-end mode, files are sealed with post-quantum encryption before they leave your device, and only the person you're sending to holds the key. (Transport-only mode is relay-carried by design — no end-to-end encryption.) How the encryption works →

More questions? Everything's answered in the docs →

Just drop a file.

No account. No stored uploads. No waiting. Your file is encrypted in your browser and disappears after delivery.

Send Now
No sign-up required. Works in any modern browser.