Toss: Secure file transfer by AppBits

Toss puts your personal receive link in the Firefox sidebar. Share it with anyone: they open it in any browser and pick a file, you click Accept, and the file streams straight to you over encrypted WebRTC. No cloud, no sign-up, any device.

Toss is peer-to-peer file sharing that does three things:

• Peer-to-peer file transfer: files go straight from one browser to another over encrypted WebRTC. They're never uploaded to a server or a cloud drive.
• A personal link for receiving files: send your link to anyone and they can send you files from any browser, with no account and no app on their side.
• Cross-platform file sharing: Android phones (Samsung, Pixel, Xiaomi and others), iPhone, iPad, Windows, Mac, Linux and ChromeOS, in any direction.

One click on the toolbar icon opens your link and inbox next to whatever page you're on, so you can accept incoming files without switching tabs.

━━━━━━━━━━━━━━━━━━━━
HOW IT WORKS
━━━━━━━━━━━━━━━━━━━━

1. Click the Toss icon in the toolbar. The sidebar opens with your personal receive link.
2. Copy the link and send it by chat, email or text, or paste it into a support ticket. Send it to one person or to ten.
3. Whoever opens the link sees "YourName wants a file from you" and a drop area. They pick or drag in a file.
4. You see who is sending, the file name and the size. Click Accept or Decline.
5. Accepted files go directly from the sender's browser to yours, with a live progress bar, speed and time left on both sides.

The sender needs nothing but a browser: Chrome, Firefox, Edge, Safari, on desktop or phone. Only you, the person receiving, use the extension.

━━━━━━━━━━━━━━━━━━━━
WHY TOSS
━━━━━━━━━━━━━━━━━━━━

• Peer-to-peer file transfer: files go browser to browser over WebRTC and are never stored on a server.
• No sign-up, no login, no email address: your anonymous identity is created in your browser the first time you open it.
• Encrypted end to end in transit: WebRTC encrypts every transfer (DTLS), and file names, sizes and types are encrypted before they reach the signaling server, so the server never sees what you are sending.
• Integrity check: both sides compute a SHA-256 hash while the file streams, and the file is only marked as saved when the hashes match.
• You decide what comes in: nothing is downloaded until you click Accept.
• Several senders at once: many people can send you files at the same time through the same link.
• A link that stays: your personal link keeps working until you replace it. Need a fresh one? Click New link and the old link stops working right away.
• Survives network hiccups: if Wi-Fi drops or you switch networks, the transfer reconnects and resumes where it stopped instead of starting over.
• Works across networks: when a direct connection isn't possible (strict firewalls, mobile carriers), an encrypted relay keeps the transfer going.
• Same inbox everywhere: the sidebar shows the same link, inbox and history as Toss in a normal tab. Accept in one place and the others show the progress.

━━━━━━━━━━━━━━━━━━━━
ANY DEVICE TO ANY DEVICE
━━━━━━━━━━━━━━━━━━━━

Toss runs in the browser, so it works across platforms and brands. Send photos, videos and documents from an Android phone (Samsung Galaxy, Google Pixel, Xiaomi, OnePlus, Motorola) to an iPhone or iPad, from a phone to a Windows PC, Mac, Linux or ChromeOS computer, or between two computers. No AirDrop, Nearby Share, Quick Share, cable or cloud drive needed, and the phone doesn't need an app.

Phone right next to you? Scan the QR code above your link with the phone's camera to open the send page.

━━━━━━━━━━━━━━━━━━━━
RECENT CONNECTIONS
━━━━━━━━━━━━━━━━━━━━

When you accept a file from someone, you both appear in each other's Recent connections. Next time you can send them a file directly from the list without sharing a link again. Remove a connection at any time and neither of you can send to the other until a new link is shared.

━━━━━━━━━━━━━━━━━━━━
FILE HISTORY AND PREVIEWS
━━━━━━━━━━━━━━━━━━━━

Toss keeps a history of files you received and sent, with small previews for images, videos and text files. The history is stored only in your browser and is never uploaded. Clear it with one click.

━━━━━━━━━━━━━━━━━━━━
GREAT FOR
━━━━━━━━━━━━━━━━━━━━

• Collecting photos and videos from friends and family after a trip or event
• Getting documents, contracts, scans and screenshots from clients
• Receiving logs, screenshots and crash reports from customers in support
• Moving files from your phone to your computer without cables, cloud drives or email attachments
• Sending photos from an Android phone to an iPhone, or from an iPhone to a Windows PC
• Getting design files, exports and archives from teammates and freelancers
• Asking someone for a large file that is too big to email
• Sending a file to a computer you don't own, without signing in to anything

━━━━━━━━━━━━━━━━━━━━
PRIVACY
━━━━━━━━━━━━━━━━━━━━

Toss is built so that it knows as little about you as possible:
• Your files never touch a Toss server. They go straight from the sender to you.
• File names, sizes and types are encrypted on the sender's device and only decrypted in your browser.
• No email, phone number or real name is collected. Your identity is a key pair stored in your browser, shown as a friendly generated name like HappyElephant7556 with a matching avatar.
• File history and previews are stored locally and never sent anywhere.
• Anonymous statistics: the Toss web app counts which pages are opened and which buttons are pressed (Umami) and reports app errors (Sentry), so we can see what is used and fix bugs. No cookies, and no files, file names, links, names or ids are sent. It's off if your browser sends Global Privacy Control or Do Not Track, and you can turn it off with one of those in your browser's privacy settings. Firefox also asks about "technical and interaction data" when you install the add-on (change it later in Add-ons and themes → Toss → Permissions and data).
• The extension adds no content scripts, doesn't read or change the pages you visit, and doesn't track your browsing. Its only permission is access to the Toss website it displays.

Full privacy policy: https://toss.appbits.dev/privacy

━━━━━━━━━━━━━━━━━━━━
GOOD TO KNOW
━━━━━━━━━━━━━━━━━━━━

• Transfers happen live: the sidebar (or a Toss tab) needs to be open to receive. If you're offline, the sender's file waits in your inbox for up to 24 hours while their page stays open, and starts when you come back and accept.
• Closing the sidebar is like closing a tab: a transfer that is running in it stops. The file returns to your inbox, and it starts over when you accept it again.
• Senders can pick or drop several files at once. Each file is offered on its own, and you accept or decline them one by one or all together.
• Toss works in the sidebar and in a normal tab at https://toss.appbits.dev, with the same identity and inbox in both.

━━━━━━━━━━━━━━━━━━━━
FREQUENTLY ASKED QUESTIONS
━━━━━━━━━━━━━━━━━━━━

Does the sender need the extension or an account?
No. The sender only opens your link in any modern browser, on desktop or mobile.

Where are my files stored?
Nowhere in the middle. The file streams from the sender's browser directly into yours and is saved on your device.

Is the transfer secure?
Yes. Every WebRTC connection is encrypted, file details are end-to-end encrypted, and every file is checked with SHA-256 before it's marked as saved.

Can someone send me a file without my permission?
They can offer one, but nothing is transferred until you click Accept. You can decline any file, and you can replace your link at any time to cut off everyone who has the old one.

What happens if my connection drops?
Toss reconnects automatically and resumes from the last received byte.

Is there a desktop app?
You don't need one. Toss runs in the browser, and this extension keeps it one click away in the sidebar.

Toss: peer-to-peer file sharing, a link to receive files, on any device. No cloud and no sign-up.