No sender account
Accountless upload pages.
Senders can upload files without becoming users of your infrastructure or file platform.
Secure intakeSelf-hosted file drop
A self-hosted file drop that stays small.
Sprag is a narrow open-source file drop for accountless one-way intake. It is not a groupware suite, sync drive, or workflow engine.
Different from a shared folder
Uploaders drop files. They do not browse your storage.
A self-hosted file request should not become another workspace. Sprag gives the public side only the minimum it needs: page metadata, an optional PIN, upload, and receipt.
No return path
No listing or download surface.
The upload page does not expose submitted objects, folder contents, or retrieval paths.
Compare toolsSovereign storage
Choose where file bodies land.
Use local MinIO, an EU S3-compatible provider, or another storage backend that matches your deployment policy.
DeployDeployment modes
The same file drop can become stricter.
| Mode | Use when | Core settings | Boundary |
|---|---|---|---|
| Plain HTTPS intake | Fast accountless intake when the Sprag server may read uploaded files. | E2E_INTAKE_ENABLED=false, IP_STORAGE_MODE=plain | Simple and useful, but not server-blind. |
| HTTPS plus E2E required | Sensitive-file intake where the server and bucket should store ciphertext only. | E2E_INTAKE_ENABLED=true, E2E_INTAKE_REQUIRED=true, IP_STORAGE_MODE=hmac-sha256 | Private-key backup is mandatory. Browser-delivered crypto still trusts the host at upload time. |
| Onion-only plus E2E | High-privacy intake where uploaders should not connect to a clearnet Sprag host. | ANONYMOUS_INGRESS=true, TRUSTED_PROXY_HOPS=0, onion BASE_URL, E2E required | No uploader IP metadata, coarser abuse limits, and cloud S3 egress remains visible to the storage provider. |