Scan the QR with your phone — any network; cellular proves the point. The phone opens an upload page, and each photo you send appears below, decrypted in this browser tab. The relay in between stores only ciphertext it cannot read: the encryption key is generated here and travels only inside the QR's URL fragment, which browsers never transmit.
Step 1 — scan
Session QR
Generating a session…
Step 2 — photos arrive
Decrypted here
No photos yet.
End-to-end encrypted
AES-256-GCM, key generated in this tab. Filenames are encrypted too — names can be identifying.
Blind relay
The relay stores ciphertext plus salted token hashes, nothing else. Photographing the QR would let someone send photos, never read any.
Demo limits
Sessions are capped at 5 photos / 10 MB and everything is purged within 15 minutes.