Nobody can push a file onto your machine.
Privatta only moves a file when the recipient asks for it. The sender can offer a file — over the LAN or the internet — but there is no command path that lets them put a single byte on your machine unsolicited. This is the same rule everywhere, not a setting you can turn off.
- Every download is recipient-initiated, always
- Structurally blocks unsolicited or malicious delivery
- Applies identically on the LAN and over P2P
Drag a file in, send it straight across.
Drop any file into Privatta and share it in seconds. It travels directly to the other machine — no upload to a server, no link that lingers in someone's inbox, no copy left behind.
- Real-time transfer speed and progress
- Works for any file type or size
- No third-party storage, ever
You decide exactly who can see what.
Share a file publicly on your LAN, with named people, or with a whole group. Bundle files into virtual folders that share one policy, so large sets stay organised and correctly locked.
- Per-user and per-group permissions
- Virtual folders with inherited rules
- Per-file descriptions for context, set by the sender
Scan a code. You're connected.
Open the mobile app, scan the QR code shown on the desktop app, and the two are paired — no account, no typing an address or a connection string by hand.
- No typing, no account required
- Available on every tier
- Android now; iOS in development
On the computer and in your pocket.
The desktop app runs on Windows and macOS. An Android companion app discovers machines on your network and browses and downloads shared files under the same access rules. iOS is in development.
- Windows & macOS desktop
- Android companion app
- Saved devices for quick reconnection
Built for real teams, not just quick shares.
The details that make Privatta workable day to day — for one person or a whole organisation.
Virtual folders
Group related files under a single shared permission set so you manage access once, not file by file.
Public LAN shares
Offer files to everyone on your local network without setting up accounts — handy for a quick handoff.
Network & VPN controls
Approve which network ranges are trusted (Tailscale, ZeroTier and the like), across every network interface on the machine. Connect straight to a known IP, or fall back to LAN scanning when you don't have one.
Saved devices
Remember the machines you connect to often and reconnect with one tap, on desktop or Android.
Server controls
Start, stop and watch your sharing server, with live status and your current public address at a glance.
Three editions
Free for quick LAN shares, Pro for private and internet transfers, Enterprise for org-structured groups (legal, finance/compliance) and an immutable audit trail.
Every feature, every edition.
Pull-only transfer and QR pairing are baseline, on every tier. Pro unlocks internet P2P, offline license activation, and private access control. Enterprise adds an immutable audit log and user groups pre-modeled on real org structures — no features are removed, only added.
| Feature | FreeQuick LAN shares | Pro★Private & internet | EnterpriseOrganisations |
|---|---|---|---|
| Core Transfer | |||
| Pull-only transfer — recipient always initiates, sender can never push | |||
| Any file type, any size — no upload quota | |||
| LAN (local network) direct transfer | |||
| WebRTC end-to-end encryption (DTLS, negotiated peer-to-peer) | |||
| Real-time transfer progress | |||
| Internet P2P transfer (WebRTC + one-time connection key) | |||
| Daily transfer limit | 10 per day | Unlimited | Unlimited |
| LAN-only mode (zero outbound calls, air-gap capable) | |||
| Access Control | |||
| Public (globally shared) files — no account required | |||
| Per-user private file access control | |||
| Single-use connection key over P2P; MAC address whitelist on LAN | |||
| Three-factor auth: credentials + connection key/MAC + file permission | |||
| Per-file optional description | |||
| Virtual folders (shared permission set across grouped files) | |||
| Trusted CIDR ranges (Tailscale, ZeroTier, company VPN) | |||
| User groups with group-level file permissions | |||
| Group membership file-access inheritance | |||
| Security & Audit | |||
| DTLS-encrypted handshake on every connection (WebRTC) | |||
| P2P login rate-limiting (5 failures / 10-min window → session locked) | |||
| LAN login rate-limiting (20 failures / 15-min window → block) | |||
| Path enumeration prevention (requests never reveal whether a path exists) | |||
| Immutable access log (IP, machine, user, file, outcome — no delete capability exists in the code) | |||
| Offline / air-gap license activation (signed, machine-bound license file — zero network calls) | |||
| AES-256-CBC encrypted transfer counter (tamper-evident free-tier limit) | N/A | N/A | |
| Connectivity & Platform | |||
| Windows 10+ / macOS 12+ desktop app | |||
| QR code device pairing (scan-and-pin, no typing) | |||
| Android companion app (browse + download) | |||
| iOS companion app | In dev. | In dev. | In dev. |
| Automatic mDNS LAN discovery (zero config) | |||
| Saved devices for quick reconnect | |||
| Open-source, stateless relay introduces peers (default or self-hosted) | |||
| STUN-assisted NAT traversal for direct WebRTC connections | |||
| Enterprise Organisation | |||
| On-premise, zero cloud dependency | |||
| User groups pre-modeled on real org structures (legal, finance/compliance, etc.) | |||
| Group-scoped virtual folders | |||
| Group-level access check across full membership hierarchy | |||
See exactly how a file gets there.
On the office network, across the internet, or fully offline — the route is always direct.