Open to anyone

Upload

Drop a file below. When it finishes you get a receipt: the URL, the content identifier, and the hash that produced it. Take the URL and use it wherever you like.

The uploader needs JavaScript. It chunks large files and resumes interrupted transfers, which a plain HTML form cannot do. Everything else on this site works without it.If you would rather not run it, the API takes an ordinary multipart POST: curl -F "file=@photo.png" -F "product=image" https://nova.thebugreport.dev/api/v1/blobs

JPEG · PNG · WebP · GIF · TIFF · BMP
100 MiB per file
100 files per batch

What you are agreeing to

Before you drop something in

Anything you upload here is public. Uploads land in a public collection, which means the URL you get back works for anyone who has it. Nothing here is a private drop box.

Nothing expires on its own

There is no retention timer and no automatic purge. A blob stays until it is removed deliberately — by a takedown, a moderation action, or a request from you. Content addressing means two identical files are one blob, so removal applies to the bytes rather than to your particular link.

This is a beta, so keep your original

The federation is small and young. Replication is real and audits are real, but the honest advice during a beta is the same as for any storage you did not build yourself: this should be a copy, not the copy.

What gets logged

The coordinator records the uploading IP address for 30 days for abuse handling, then drops it. There is no analytics, no tracking pixel, and no third-party asset on this page — the uploader is served from this domain like everything else.

The full terms are on the terms page.

Reference

What comes back

URL: Permanent, cacheable, and safe to hotlink
CID: The content identifier for the blob
SHA-256: Of the ciphertext — verify it yourself
Envelope: XChaCha20-Poly1305, per blob
Replication: The donors now holding a copy

Resized copies

Images can be served at a few fixed widths without re-uploading: append /i/<cid>/w320.png and swap the number for 512, 1024, or 2048. Any other width is refused rather than silently rounded.

Signed URLs

A signed URL is a time-limited link, bound to one embedding origin, for content that is not public. They are minted by the coordinator because signing needs a key only the coordinator holds, so they are not something this page can hand out — ask for them in a beta email and say which origin would embed them.

Letting an uploader mint one for their own private upload is a planned addition and does not exist yet. Saying otherwise would be more flattering and less true.