Skip to main content
We are building Flux on a foundation of uncompromising privacy and security. We are determined and firmly believe that we can create something truly fresh in the cloud storage world. However, we have a very precise vision for how our ecosystem will grow.

​
Privacy first

At Flux, privacy isn’t just a feature, it’s our core principle. Every file uploaded to our platform is fully encrypted, with the sole exception of file thumbnails (which are required for the interface to run smoothly). We do not cut corners when it comes to protecting our users’ data.

​
Open source philosophy

Currently, our main services, such as Flux Drop, Flux Pass, and other peripheral services, are entirely closed source. However, we believe in transparency, especially regarding cryptography. Therefore, our encryption services and related security libraries will be released as open source once they are fully completed and audited.
When these cryptographic libraries are made public, they will be released under appropriate, strict licenses. We will not accept external contributions (Pull Requests) to this codebase. This is to maintain absolute control over the integrity and security of our encryption layer.

​
Developer access and API

At this moment, Flux does not allow third-party developers to build projects or use our API. We want to take our time to carefully rethink and design the architecture for external creators. It is crucial to us that when we open the platform, our API and official SDKs are completely reliable, secure, and offer the highest standard of developer experience. Until then, API access remains strictly internal.

​
Future plans

Our current priority is delivering the best and most secure environment for our web applications. But we are already planning ahead: mobile applications for Android and iOS are officially on our roadmap and will be released in the future.

​
Official communication channels

For your own security, please remember that the only official sources of information regarding Flux are:
  • Our official website
  • Our official Discord server
  • Social media accounts officially announced on our Discord or website
Never trust unofficial clients, unverified libraries, or third-party “integration tools”. Also, remember that we will never ask for your passwords or encryption keys outside of our official applications.

​
Security vulnerability reporting (bug bounty)

Although our API is currently closed, we continuously uphold the highest security standards. If you are a security researcher and believe you have found a vulnerability in any of our services (even internal ones), report it directly to our administration on Discord or via official support channels. Please do not disclose vulnerabilities publicly before they have been patched.