What is Hypastack?

Zero-Knowledge Architecture

Hypastack is a secure, high-performance file sharing and CDN platform built from the ground up to ensure absolute privacy for the files you share through this website. I achieve this by utilizing a strictly zero-knowledge architecture for that pipeline. Two other pipelines are deliberately not encrypted, and I would rather say so plainly than let you assume otherwise: CDN assets are public by design and have only their metadata stripped, and uploads made through the developer API are stored as received and are readable by me.

Unlike traditional cloud storage providers that encrypt your files on their servers—meaning they hold the keys and can read your data at any time—Hypastack shifts the encryption process entirely to your device.

When you upload a file, it is encrypted directly inside your browser using AES-GCM (256-bit) encryption before a single byte ever leaves your device. The encryption key required to unlock the file is securely embedded into the URL fragment (the #key=... portion). Because URL fragments are processed strictly by the browser and are never transmitted across the network, my servers literally never see, receive, or store your decryption key.

Verifiable Security

Since I never receive your key, I am mathematically incapable of decrypting your files. I cannot scan them, I cannot read them, and I cannot hand them over to third parties. If you lose your URL, the file is permanently and unrecoverably locked forever.

This zero-knowledge guarantee ensures that your data remains yours. Even in the event of a catastrophic server breach, the files stored on my network are nothing but mathematically randomized ciphertext, completely useless to any attacker without the unique key generated on your device.

Secure File Sharing vs. Permanent CDN Hosting

Hypastack offers two distinct pipelines tailored for different privacy needs: Secure File Sharing and Permanent CDN Hosting.

The Secure File Sharing pipeline is strictly zero-knowledge. Files are encrypted client-side, and the resulting unreadable ciphertext is transferred across my network. This is ideal for sensitive documents, private media, and secure backups where confidentiality is paramount.

The Permanent CDN Hosting pipeline, on the other hand, is designed for the high-speed global delivery of public assets (such as images for websites or forums). Because these files must be publicly accessible via direct r2.hypastack.com links, they are not encrypted. Instead, to protect your privacy, these assets are actively "repainted" and re-encoded upon upload. This process completely strips all hidden EXIF data, GPS coordinates, and identifying metadata before the file is distributed to my edge network, ensuring that your public uploads cannot be traced back to your location or device.