xocat.host

Private R2 file hosting

legal

Terms of Use

Last updated July 2, 2026.

1. What this is

Xocat.host is a private, invite-only file hosting service backed by Cloudflare R2 storage. It is operated as a personal project, not a commercial company, and is provided as-is with no guaranteed uptime, support, or service level.

Access is granted through invite codes. By creating an account or uploading a file, you agree to these terms.

2. Accounts and invites

  • Accounts are created using an invite code. The bootstrap environment code creates the first account only, all other accounts require a one-time invite code generated by an existing account.
  • You are responsible for keeping your account credentials and profile picture link private if you don't want them shared.
  • One account per person unless explicitly permitted by the operator.
  • Accounts found sharing invite codes for spam, abuse, or resale may be suspended without notice.

3. Storage and uploads

  • Regular accounts have a fixed storage quota of 500 MB shown on the dashboard. Premium accounts have a 2 GB quota, and purchased extra storage adds $1 per extra GB. Uploads that exceed the account quota will be rejected.
  • Regular individual file uploads are limited to 10 MB. Premium individual file uploads are limited to 100 MB. Files larger than your tier limit will be rejected.
  • Supported upload types include images, gifs, webp, avif, videos, and regular files, subject to any additional restrictions set in account settings.
  • The autowipe setting, when enabled, will automatically delete files after the configured period. It is off by default and applies going forward only, it does not retroactively guarantee retention of existing files.
  • The exploding files setting allows single-open (view once) uploads. Once a file has been opened under this setting, it is deleted and cannot be recovered by you or the operator.
  • The clear location data setting strips embedded metadata (such as GPS EXIF data) from uploaded images by default. You are still responsible for reviewing files before upload if metadata removal is critical to you.

4. Prohibited content and conduct

You may not upload, host, link to, or distribute through xocat.host:

  • Child sexual abuse material (CSAM) or any content sexualizing minors, in any form
  • Content that is illegal under the laws applicable to you or to the operator
  • Malware, exploits, phishing pages, or anything designed to compromise another person's device or accounts
  • Content that infringes copyright or other intellectual property rights you do not own or have rights to distribute
  • Material intended to harass, threaten, dox, or non-consensually expose another person, including non-consensual intimate imagery
  • Content promoting terrorism, extremist violence, or that otherwise facilitates serious harm to others
  • Violation of this section results in immediate content removal and account termination, and may be reported to relevant authorities or Cloudflare where required by law or acceptable use policy.

5. Custom domains and CDN

Subdomains configured under domain settings (such as a custom CDN subdomain) route uploads through DNS records controlled by the operator. Removing a domain from your settings does not retroactively delete files already served through it, but new uploads will stop routing through a removed domain.

6. Removal and takedowns

The operator may remove any file or account at their discretion, particularly in response to a valid copyright complaint, legal request, or violation of section 4. If you believe content hosted on xocat.host infringes your rights, contact the address in section 9 with enough detail to identify the file (URL, upload date, and a description of the issue).

7. No warranty

Xocat.host is provided as-is and as-available. The operator does not guarantee that the service will be uninterrupted, secure, or error-free, and is not liable for data loss, including files deleted through autowipe, exploding files, account termination, or service discontinuation. Keep independent backups of anything you cannot afford to lose.

8. Termination

The operator may suspend or delete your account and associated files at any time, with or without notice, for violation of these terms or for operational reasons (such as shutting down the service entirely). You may request deletion of your own account and data at any time by contacting the operator.

9. Changes and contact

These terms may be updated at any time. Continued use of xocat.host after changes are posted constitutes acceptance of the updated terms. For questions, takedown requests, or account issues, contact support@xocat.online.