Privacy & Security: Zero Cloud Storage Guarantee

In an era where central cloud servers frequently suffer security breaches and unauthorized data scraping, FLIT is engineered with a strict principle: the most secure way to protect user data is never to store it.

1. Direct Browser-to-Browser Pipe

FLIT does not maintain cloud storage buckets, file database records, or intermediate caches. Files transfer directly from the sender's local memory or disk into the recipient's local storage. When the transfer completes or the browser tab closes, no copy remains on any external server.

2. End-to-End Transport Encryption (DTLS)

WebRTC requires all DataChannels to be secured via DTLS (Datagram Transport Layer Security). DTLS uses robust public-key cryptography to negotiate unique session keys for every transfer pair. Intermediary network eavesdroppers (including public WiFi hotspots and Internet Service Providers) cannot read or tamper with transmitted file chunks.

3. Ephemeral Room Codes (10-Minute TTL)

Connection rooms are transient. Room signaling states and session tokens are stored in high-speed in-memory Redis caches with a strict 10-minute time-to-live (TTL). Once expired, all room references are permanently expunged.