Ready to get started?Get Started
PhotoSafe is a photo backup for people who would rather not hand twenty years of family photographs to an advertising company. Your files are encrypted on your own device with a key we never receive. We store the ciphertext. We cannot open it, scan it, train on it, or hand it over in a readable form — and neither can anyone who breaks into us.
AES-256-GCM per file, keys wrapped by a master key that only your passphrase unwraps. The server sees opaque blobs.
The same photo uploaded twice is stored once. Your device computes the fingerprint; you are not charged twice for it.
Share an album by link. The album key travels in the URL fragment, which browsers never send to a server — so we cannot read a shared album either.
Your filename and date index is decrypted in your browser and searched there. Nothing about your library is queryable by us.
One button produces a tar.gz of every byte we hold plus a manifest. A 200-line open script turns it back into your photos with no account and no network.
Every restore re-checks the SHA-256 of each file against the fingerprint taken before upload. A mismatch is reported, never silently passed.
We would rather say this on the homepage than in a support ticket.
We will write to you when accounts open. No charge, no card, and you can reply STOP at any time.