Loading
snaphost is built so that the convenient path is also the safe one. Sites are private by default, served only to verified viewers, and every access is logged.
Private sites never render until the viewer proves who they are. No file leaves storage before identity is confirmed.
Your bundles live in a fully private bucket. We never hand the browser a direct or presigned storage link.
Every site runs in an isolated, locked-down frame so one page can never read another or reach your account.
Invite people by email or with a wildcard like *@acme.com. Each viewer confirms their address before access.
Every request, verification, view, and denial is recorded so you always know who opened what, and when.
Tokens are scoped to a single account, shown once, and revocable instantly. Rotate them whenever you like.
When someone opens a private link, they are asked to confirm their email before anything loads. Only after snaphost matches them against your allowlist do we mint a short-lived delivery token and stream the page from private storage into a sandboxed frame. The underlying files are never exposed to the browser directly.
Traffic is encrypted in transit, and stored bundles are encrypted at rest. We keep the metadata needed to run your account, such as site titles, allowlists, and the access log, and nothing more. You can delete a site and its history at any time from your dashboard.
Found something that looks off? We want to hear about it. Email security@snaphost.ai with the details and we will get back to you quickly. We are grateful to researchers who report issues responsibly.