Introduction: The Sync Paradox
There’s a strange paradox at the heart of the modern digital workspace. We have more cloud storage than ever, more devices than ever, and yet the simple act of keeping a folder in sync across those devices often feels fraught with compromise.
You either trust a large tech company with your most sensitive files, hoping their opaque security policies are robust enough to protect you. Or, you rely on a complex, self-hosted solution that offers control but often at the cost of constant maintenance and friction.
We felt this tension acutely. As a company that works with data and storage, we found ourselves using workarounds we weren't proud of. We’d email files to ourselves, juggle USB drives, or rely on a sync tool that, while convenient, required us to ignore the nagging feeling that we had surrendered too much control.
This friction is what led us to create CDNShark Sync. And in doing so, we realized we had to make a choice: build a tool that felt secure, or build a tool that was secure, and then be brutally honest about what that actually means for the user.
The Core Conviction: Data is Personal, Not a Product
The foundational principle of CDNShark Sync is simple but consequential: Your data belongs to you. It's not a resource for us to analyze, a vector for targeted advertising, or a liability we’re willing to compromise for the sake of a 'Forgot Password?' button.
This conviction led to a critical design decision: CDNShark is never in the data path.
From the moment you install the app, it communicates directly with storage. Whether that's the storage in your CDNShark plan or your own private S3 bucket, the data doesn't pass through our servers. We can't see it, we can't log it, and we can't be compelled to hand it over because we simply don't have it.
This architecture shapes everything else we built.
The "You Choose" Philosophy: Two Ways to Connect, One Honest Approach
We don't believe in a one-size-fits-all solution. Our goal is to provide transparent tools and give you the freedom to choose.
Use Your CDNShark Account: For simplicity and zero setup. You sign in, and a private sync workspace is created automatically. It uses the storage included in your plan. This is for when you want to get going in under a minute and trust us to manage the infrastructure, even if we technically could access your files (unless you enable end-to-end encryption).
Direct S3 — Bring Your Own Storage: This is for those who want ultimate sovereignty. Are you already a user of Wasabi, Backblaze B2, AWS S3, or MinIO? Point CDNShark Sync directly at your bucket. We don't store your files; we simply provide a powerful, efficient sync client for your own infrastructure. No CDNShark account is even required. Your access keys are stored in your OS keychain, never in plain text. You own the data, and you own the bill.
The Hard Conversation: What Does "End-to-End Encryption" Actually Mean?
This is where we chose transparency over marketing fluff. The term "end-to-end encryption" (E2EE) is often used as a magic wand to solve all trust issues. We wanted to be precise about what it can and cannot do.
What we do:
If you choose our E2EE option, every file is sealed with AES-256-GCM on your device before it is ever uploaded. Your encryption key is locked with a passphrase that never leaves your machine. We receive the locked version of your key and absolutely nothing else—not the passphrase, not the key itself.
You are the only one who can open your files.
The Honest Trade-Off:
This level of security comes with a critical responsibility. Because we do not hold your key, we cannot reset your passphrase for you.
This is a feature, not a bug. The moment we built a backdoor for password resets, we would have created a vulnerability. We believe in a system where security is absolute and the trade-offs are clear.
So, we give you a one-time recovery code when you set up E2EE. It's a 40-character key you must store in a password manager or print and keep safe. This code is your only safety net. If you lose both your passphrase and your recovery code, your data is irrevocably gone. There is no support ticket, no override, and no magical backdoor.
We'd rather you know this upfront than be surprised later.
The "Boring" (But Essential) Features That Make It Work
Security and philosophy are great, but a sync tool has to actually work well. We built a foundation of reliable features to make it a daily workhorse:
Real, Honest Sync: Drop a file in your folder, and it appears on your other devices. Changes are detected as they happen, not on a fixed timer. It just works.
Version History: For the "oops" moments. An accidental overwrite is just a couple of clicks to undo, not a frantic search for a backup.
Honest Conflicts: When the same file is edited on two devices, we don't silently overwrite one with the other. We keep both versions and ask you to choose. This is about respecting your work, not making assumptions.
Private Share Links: Need to send a file to someone? Generate a signed link that expires after 24 hours or 7 days. It’s a public, shareable link, but it is not a permanent, open public bucket.
Background Operation: Lives in your menu bar. Close the window, and it keeps syncing in the background. Status, pause, and access to your sync folder are all one click away.
The Straight Truth (and Not the Marketing Spin)
We included a section on our sync page called "Straight Answers" because we anticipate the common questions that people have before they trust a new tool. Here's a preview:
Does CDNShark see my files?
In Account mode with Standard or Client-side encryption, yes, we technically could. With End-to-End encryption, we cannot, because we never hold the key. In Direct S3 mode, we are not involved at all.
What happens if I stop paying?
Your local files are untouched. They are ordinary files in an ordinary folder on your computer. Nothing is held hostage.
Is this truly end-to-end encrypted?
Yes, if you choose that option during setup. The passphrase never leaves your device. But remember the trade-off: if you lose the recovery code and passphrase, the data is gone. That’s the security trade, and we're not shying away from it.
Conclusion: It's About Principles, Not Just a Product
In a world of complex digital threats and opaque data policies, we wanted to build a sync tool that operates on a simple, clear set of principles.
Your files are your files.
We will never make a promise we can't keep.
The power of choice and the responsibility that comes with it should be in your hands.
CDNShark Sync isn't just a piece of software. It's an expression of how we believe data should be treated. It's included with every CDN plan, or you can use it entirely for free with your own S3-compatible storage.
We invite you to try it. Read our "Straight Answers" and the "Honest Warning" about E2EE. If it sounds right for you, we're confident you'll find it's the tool you wished existed all along.
One folder. Every device. Your control.
Download Desktop Client from https://admin.cdnshark.com/sync