Nobody can push a file onto your machine.
Privatta only moves a file when the recipient asks for it. The sender can offer a file — over the LAN or the internet — but there is no command path that lets them put a single byte on your machine unsolicited. This is the same rule everywhere, not a setting you can turn off.
- Every download is recipient-initiated, always
- Structurally blocks unsolicited or malicious delivery
- Applies identically on the LAN and over P2P
Drag a file in, send it straight across.
Drop any file into Privatta and share it in seconds. It travels directly to the other machine — no upload to a server, no link that lingers in someone's inbox, no copy left behind.
- Real-time transfer speed and progress
- Works for any file type or size
- No third-party storage, ever
The key and the code travel separately.
Sharing over the internet hands out two things: a 32-character connection key, and a 6-character security code generated on your machine that never passes through the relay. Send them by different routes — the key in chat, the code read out on a call — and an intercepted key on its own reaches a machine that will not answer. The host checks the code before credentials and before listing a single file.
- Both work once; the key expires in 5 minutes
- The code is checked before any file is listed
- Five wrong tries locks the session until you issue a new pair
Let someone in without creating an account for them.
A one-off handoff no longer means setting up a user on your machine. Mark a file for everyone, and a guest who has the key and the code can download exactly that — and see nothing else. Anyone who needs more signs in as a user you created, and sees the public files plus whatever is shared with them.
- Guests see only the files you marked for everyone
- The panel tells you how many that is before you share a key
- Signing in adds private files on top, never replaces them
You decide exactly who can see what.
Share a file publicly on your LAN, with named people, or with a whole group. Bundle files into virtual folders that share one policy, so large sets stay organised and correctly locked.
- Per-user and per-group permissions
- Virtual folders with inherited rules
- Per-file descriptions for context, set by the sender
Scan a code. You're connected.
Open the mobile app, scan the QR code shown on the desktop app, and the two are paired — no account, no typing an address or a connection string by hand.
- No typing, no account required
- Available on every tier
- Android now; iOS in development
On the computer and in your pocket.
The desktop app runs on Windows and macOS. An Android companion app discovers machines on your network and browses and downloads shared files under the same access rules. iOS is in development.
- Windows & macOS desktop
- Android companion app
- Saved devices for quick reconnection
It tells you when there's a new version.
Privatta checks for a newer build once shortly after launch — not on a timer that interrupts a transfer — and installs it on your say-so. Where a build can't replace itself, it says so and points you at the download instead of failing halfway through. Releases that change something older versions can't work with can be marked required, with an explicit opt-out rather than a forced exit.
- One check per launch, never mid-transfer
- Nothing downloads without you pressing the button
- Required releases can be declined, at your own risk
Built for real teams, not just quick shares.
The details that make Privatta workable day to day — for one person or a whole organisation.
Virtual folders
Group related files under a single shared permission set so you manage access once, not file by file.
Public shares
Offer files to everyone without setting up accounts — on your local network, or over the internet to anyone holding the key and the code.
A log that covers both transports
Enterprise access logging now records internet sessions as fully as local ones — sign-ins, refusals, denied files, transfers and disconnects — with each entry marked LAN or P2P and carrying the visitor's machine name, MAC and device ID.
Nine languages
The interface and the in-app help in English, German, Spanish, Russian, Japanese, Chinese, Arabic, and Serbian in both Latin and Cyrillic.
Network & VPN controls
Approve which network ranges are trusted (Tailscale, ZeroTier and the like), across every network interface on the machine. Connect straight to a known IP, or fall back to LAN scanning when you don't have one.
Saved devices
Remember the machines you connect to often and reconnect with one tap, on desktop or Android.
Server controls
Start, stop and watch your sharing server, with live status and your current public address at a glance.
Signed Windows builds
The Windows installer and portable build carry an Authenticode signature issued to Royal SoftWorks, so Windows names the publisher and you can verify who built the file before you run it. macOS signing is in progress.
Three editions
Free for quick LAN shares, Pro for private and internet transfers, Enterprise for org-structured groups (legal, finance/compliance) and an immutable audit trail.
Every feature, every edition.
Pull-only transfer and QR pairing are baseline, on every tier. Pro unlocks internet P2P, offline license activation, and private access control. Enterprise adds an immutable audit log and user groups pre-modeled on real org structures — no features are removed, only added.
| Feature | FreeQuick LAN shares | Pro★Private & internet | EnterpriseOrganisations |
|---|---|---|---|
| Core Transfer | |||
| Pull-only transfer — recipient always initiates, sender can never push | |||
| Any file type, any size — no upload quota | |||
| LAN (local network) direct transfer | |||
| WebRTC end-to-end encryption (DTLS, negotiated peer-to-peer) | |||
| Real-time transfer progress | |||
| Internet P2P transfer (WebRTC + one-time connection key and security code) | |||
| Daily transfer limit | 10 per day | Unlimited | Unlimited |
| LAN-only mode (zero outbound calls, air-gap capable) | |||
| Access Control | |||
| Public (globally shared) files — no account required | |||
| Guest access over P2P — connect with no account, see only files marked Everyone | |||
| Per-user private file access control | |||
| Single-use connection key + out-of-band security code over P2P; MAC address whitelist on LAN | |||
| Four checks over P2P: connection key + security code + credentials (or guest) + file permission | |||
| Per-file optional description | |||
| Virtual folders (shared permission set across grouped files) | |||
| Trusted CIDR ranges (Tailscale, ZeroTier, company VPN) | |||
| User groups with group-level file permissions | |||
| Group membership file-access inheritance | |||
| Security & Audit | |||
| DTLS-encrypted handshake on every connection (WebRTC) | |||
| P2P rate-limiting (5 wrong codes or passwords → session locked until a new key and code) | |||
| LAN login rate-limiting (20 failures / 15-min window → block) | |||
| Path enumeration prevention (requests never reveal whether a path exists) | |||
| Immutable access log (channel, IP, machine, MAC, device ID, user, file, outcome — no delete capability exists in the code) | |||
| Internet (P2P) sessions audited: sign-ins, refusals, denied files, transfers, disconnects | |||
| Hash-chained log entries — edits made outside the app are detected | |||
| Offline / air-gap license activation (signed, machine-bound license file — zero network calls) | |||
| AES-256-CBC encrypted transfer counter (tamper-evident free-tier limit) | N/A | N/A | |
| Connectivity & Platform | |||
| Windows 10+ / macOS 12+ / Linux desktop app | |||
| Code-signed Windows installer and portable build (Authenticode, Royal SoftWorks) | |||
| Automatic update check at launch, installed on your confirmation | |||
| Interface and in-app help in nine languages | |||
| QR code device pairing (scan-and-pin, no typing) | |||
| Android companion app (browse + download) | |||
| iOS companion app | In dev. | In dev. | In dev. |
| Automatic mDNS LAN discovery (zero config) | |||
| Saved devices for quick reconnect | |||
| Open-source, stateless relay introduces peers (default or self-hosted) | |||
| STUN-assisted NAT traversal for direct WebRTC connections | |||
| Enterprise Organisation | |||
| On-premise, zero cloud dependency | |||
| User groups pre-modeled on real org structures (legal, finance/compliance, etc.) | |||
| Group-scoped virtual folders | |||
| Group-level access check across full membership hierarchy | |||
See exactly how a file gets there.
On the office network, across the internet, or fully offline — the route is always direct.