Skip to main content
Back

Technical foundation

Client-side, short-lived, and honestly scoped.

ClipToss should move small information from one device to another without accounts, Stripe, or a content database. That works when the product core stays intentionally small: short text, links, codes, and small files instead of cloud storage.

QR and short payloads

For very short text, the content or an encrypted package can be handed over directly as a QR code. It is fast, accountless, and works especially well when both devices are in front of you.

Roomless QR packet

Very short text can live entirely inside the QR code. An optional PIN protects the content in the browser using PBKDF2 and AES-GCM. Without a PIN, use it only in private viewing situations.

Fragment link and word code

With a link, the secret part lives after # and is normally not sent as an HTTP path. With word code, 4 to 6 words are typed and the browser derives the key from them.

WebRTC for direct sessions

For several small transfers, a WebRTC DataChannel connection can help. It needs pairing signals, but not a content database. Some networks require STUN or later a TURN relay for reliability.

No permanent cloud storage

Browser storage such as sessionStorage, localStorage, or IndexedDB can add convenience, but it stores only locally on the current device. ClipToss should not turn it into hidden cloud history.

SEO without sensitive app indexing

Home, guides, technology, and legal pages are crawlable. Transfer, room, join, and API flows stay noindex so crawlers cannot create rooms or collect operational URLs.

Important limits

  • No platform can move arbitrary data over the internet without any transport path.
  • Without a database, permanent sync is not the goal.
  • Without login, there is no cross-device history, which is intentionally a privacy advantage here.
  • Ads and analytics must only load with proper consent.
  • Limits protect users and the operator: small files, short QR packets, few devices, and rate limits against bots.

Where ClipToss sets limits

QR packet

700 chars, optional PIN, no upload

Public session

short lifetime, idle timeout, max 2 devices

Files

small files instead of backup or cloud storage

Abuse protection

rate limits per IP, device, room, and join attempt