Direct uploads
Rails signs a short-lived upload request. Ordinary file bytes move from your browser directly to S3-compatible storage. The application server does not proxy them.
Built to be checked, not trusted blindly.
Uploads are treated as untrusted. Public URLs are temporary bearer links you can expire or revoke. Wirecopy does not build visitor profiles.
Verify before release
The initial production preview verifies the stored byte count before creating a link. Malware scanning is not yet enabled.
High-entropy links
Public paths use cryptographically random tokens. Anyone holding a link can open it, so revocation and expiry remain available from your ledger.
Minimal analytics
Wirecopy records aggregate access count and the last access time. It does not build visitor profiles or expose recipient identity.
Verified serving
Published sites are served only after each file's bytes match the SHA-256 recorded in its manifest at publish time.
Artifact-domain isolation
Sites are served from wirecopy.site, never from the application origin wirecopy.app. Each publication gets its own isolated subdomain and sets no cookies.