Image and video sharing: passwords, download protection, album links

GlaCat image and video links do not allow downloads by default: visitors can view the content online, but the original file is never offered for download unless the uploader explicitly turns on "allow visitors to download".

Upload limits

• Images: up to 80MB each, in JPEG, PNG, GIF, WebP, AVIF or SVG. Up to 5 at once anonymously, or 10 when signed in — and multiple images become a single album link (one short URL you can page through), not several separate links.
• Video: up to 500MB, in MP4, WebM or MOV, uploaded in chunks and seekable during playback.
• Retention: anonymous images last up to 30 days and videos up to 7 days. Signing in extends this, or unlocks unlimited retention (with automatic recycling after 90 consecutive days without a single view — stated plainly at creation time, not buried).

Protections

• Access password: file links can be locked; nothing is visible until the password is verified. Passwords are stored as a one-way PBKDF2 hash, so the database holds no plaintext.
• Downloads off by default: when downloads are disabled, hand-crafting the download URL still fails — the server refuses and redirects to the viewer page. The protection is enforced server-side, not by hiding a button in the interface.
• Hotlink protection: files are only served for embedded requests originating from GlaCat itself; direct references from other sites are sent to the viewer page instead.
• Viewer protections: a transparent shield layer blocks right-click "save as" and mobile long-press menus, and video is served with picture-in-picture and the native download button disabled.

These measures stop casual saving, but nothing on the web can prevent a screenshot — any service claiming otherwise is not being straight with you. For genuinely sensitive material, combine a password with a view limit.

Editing and management

Before uploading you can crop, annotate and filter images in the built-in editor, which includes a mosaic brush with an adjustable size for redacting personal information. After uploading, every link has click analytics in the dashboard, and you can delete it manually at any time.