Do not take
our word for it
Everywhere else on this site we make promises. Here you can check one, with your own file, right now.
Check a file
Your browser reads the file and works out its fingerprint. It asks us only for the few numbers needed to place that fingerprint in the record we published on the day the file arrived. The file itself never leaves your machine.
Drop one of your songs here
Audio only
I already have the fingerprint
What holds each promise up
Every file gets a fingerprint the moment it arrives. Change one byte anywhere in it and the fingerprint changes completely. We show it on every version and beside every file in your export, so you can check a download on your own machine:
macOS shasum -a 256 "your file.wav"
Linux sha256sum "your file.wav"
Windows Get-FileHash -Algorithm SHA256 "your file.wav"
Matching numbers mean the file on your disk is the one you uploaded. We are not part of that comparison. Check the file in storage, on any version, reads the stored file again and works the fingerprint out fresh, so it answers whether your file is intact today. If it ever disagrees, we tell you.
The date beside a file is ours, and you are entitled to point out we could have written anything. So every night we fold that day's fingerprints into one number and publish it. Published numbers cannot be edited or removed afterwards, by us or by anyone.
That is what the check above measures your file against. The number was published before anybody had a reason to argue about it, the arithmetic runs in your browser, and it still works after you close your account. It works even if you stop trusting us, which is the only kind of proof worth having.
A number is published for days that have ended and had at least one upload. Yours appears the night after your first file arrives.
Your originals and the copies used for playback are kept apart. What answers a shared link reaches the playback copies and has no route to your originals. That is not a rule it follows. It is a door it does not have.
There is no browse page, no feed and no search. A song is reachable only through a link you made yourself, and no link is ever indexed.
An unnamed link gets a random address that cannot be guessed. A named one is as guessable as the name you chose, which is your trade to make. Put a passcode on anything that would matter if the wrong person opened it.
People delete the wrong take and notice a week later. That window is not enforced by our code, which is the point: it is set on the storage itself, one layer below anything we write.
Nothing younger than fourteen days can be removed. If our code is wrong, or somebody takes control of our systems and orders a deletion, the answer is still no. That includes us, even if you ask.
Settings, then Export everything. No request, no waiting on us. It works on the free plan, over quota, past due, and part way through cancelling.
You get your catalogue as a spreadsheet and as a data file, plus a script that downloads every original and checks each one against its fingerprint. The download links last twelve hours and you can revoke them at any point, because an export is working access to your music.
What this does not prove
- A fingerprint proves your file is whole. It does not prove nobody read it, and nothing we could show you would.
- A published number proves a file existed on a day. It does not prove you wrote it. No timestamp anywhere can. What it does is put the date beyond our reach to change.
- Two things on this page are promises rather than machinery. We do not train anything on your music and we never will, and if we are broken into you hear about it within three days in plain words. Both sit in the terms, where they bind us, and the incident log was published before there was anything to put on it.
Every number we have published
One line per day, kept for ever. These are what any check above is measured against.
If anything here is wrong, or the product does something different, tell us.