Frequently asked questions

The simplest secure file sharing there is. Pay once in bitcoin, upload a file, and hand someone a single link. No account, no name, no email, no trail. The link locks to whoever opens it first, so it works for your recipient and nobody else.

It's TX woven into IO — transmit, in and out. Data in, data out, and no record in between. The name is the whole product in four letters: we move your file from one hand to another and keep nothing once it's through.

No. There's nothing to sign up for and nothing to log into. A membership is just a key you hold — it isn't tied to an identity, and we couldn't link it to one even if we wanted to. That's the point.

Uploads are generous by default and sized for real files, not just documents. Exact ceilings will be published alongside tiered pricing at full launch. During private launch, if you have an unusually large payload, mention it in your early-access request.

Unclaimed links expire 48 hours after upload. If nobody opens the link within that window, the file is deleted automatically and the link goes dead.

Claimed links expire 48 hours after they're claimed. The moment the first device opens a link, a fresh 48-hour clock starts for that recipient. Once it runs out, the file is gone.

Short lifetimes are a feature, not a limitation — files that don't linger can't be harvested later.

The first device to open a link claims it. From that point on, the link only works from that IP address. Anyone else who tries the same link — even with the exact URL — hits a dead end. So a link that leaks is useless to whoever finds it, because it's already bound to your recipient.

Yes — and because files get deleted so often, good link names free up fast, so you can be picky. By default we'll try to use the file's original name as the link. If that name is currently taken, you'll get options:

• pivot to a different path — links can live under /dl/, /tools/, /tool/, or /docs/
• or set a custom download link of your own

For example, if /dl/report.zip is claimed, /tools/report.zip or /docs/report.zip may be wide open.

Once a claimed link expires, its name returns to the pool and can be reused. If a recipient claims a link from the wrong device, the cleanest fix is to re-share a new link — remember they're cheap and files rotate constantly.

During private launch, every upload is a flat 1,000 satoshis. No subscription, no minimum, no bundle you have to commit to — you pay per file. Tiered pricing (volume rates and membership plans) will arrive with the full release.

Fair point — bitcoin is pseudonymous, not anonymous. Monero is not currently supported, but we're actively looking into implementing it soon, and privacy coins like it are the natural fit for what tixo is. Watch this page for updates.

In the meantime, tixo itself stores nothing that ties a payment to a person: no account, no email, no logs. The chain is the only ledger, and we don't annotate it.

Not right now, and here's the honest reasoning: Tor is already inherently anonymous, so layering it on top of an already-anonymous service buys little — and it's notoriously slow, which fights against the "grab your file and go" experience. You're free to reach tixo over Tor today if you like. If the demand is there, we'll add first-class support in a future update.

As little as physically possible. There's no account system to attach activity to. The one piece of state a link needs is the IP that claimed it — that's what makes the lock work — and it's discarded when the file expires. No logs, no exceptions.

No. All sales are final. Payments are on-chain and uploads are processed immediately, so there's nothing to reverse. Double-check your file before you pay.

Not yet — but a proper API is planned for the full release, so you'll be able to script uploads and link management instead of doing everything by hand. If API access is important to your workflow, say so in your early-access request and we'll keep you in the loop.

tixo is in private launch while we harden things. Drop your email on the home page and we'll send an invite when a slot opens. We keep that list lean on purpose.

Fair question — it's the one identifying thing we touch, so here's exactly how it works. Invites go out in batches, and everyone in a batch gets the same generic email: a note that sign-ups are live. It contains no personal token, no account, nothing unique to you — just "the door is open, come make a key."

Because of that, your account is never tied to the address you gave us. The email is only a one-way "we're ready" ping; the actual account is a key you generate yourself afterward, which we can't link back to the address. Once the invite is sent, the two have nothing to do with each other.

Want to keep it fully anonymous anyway? Use a throwaway address from an anonymous provider like Proton Mail. You never have to hand us anything that points back to you.

Use the DMCA / takedown request form. Because links are anonymous and IP-locked we can't identify the uploader, but we can and do disable reported links. Given how fast files expire on their own, most infringing links are short-lived to begin with.

tixo is a transport, not a host — files are transient and locked to one recipient. We act on valid legal takedown requests. Use it for what you'd want done with your own private data: sent once, to one person, then gone.