Hoodik Cloud

Your own end-to-end encrypted drive, hosted for you

Privacy

Encryption

Security

Hi everyone, I'm Tibor. I started Hoodik in early 2023 as an end-to-end encrypted file server and put it on GitHub because I wanted it for myself. In 2024 someone opened an issue asking for an official hosted instance as a way to fund development, and specifically suggested charging for storage rather than features (github.com/hudikhq/hoodik/issues/108). That idea would not leave me alone, and Hoodik Cloud is what it turned into: every plan has every feature, the plans only differ in quota. You get your own instance. Own database, own storage bucket, not a shared multi-tenant setup with your rows in someone else's table. You pick EU or US at signup, and you can put the whole thing on a domain you own. Files, file names, notes and search queries are all encrypted on your device before anything goes over the wire, so what I store is ciphertext I cannot read. File contents use AEGIS-128L, the file keys are wrapped with a post-quantum hybrid of X25519 and ML-KEM-768, signing is Ed25519, and login uses OPAQUE so your password never reaches my server either. Search tokenizes and hashes the query on your device and the server matches hashes, which is how it finds your files without ever knowing what they are called. Day to day it behaves like a normal drive. Photos and PDFs open right in the browser, there is a markdown notes editor whose content is encrypted like everything else, and a public share link carries the decryption key in the URL fragment, so the person you send it to needs no account and my server still only serves ciphertext. The macOS app also ships an MCP server, so an AI agent on your Mac can work with your files locally while my side keeps seeing nothing readable. I build this from inside the EU, where the proposal usually called Chat Control keeps coming back, trying to make services scan private files and messages before they are encrypted. My answer is technical rather than a promise: the server never holds anything readable, so there is nothing to scan and nothing a warrant can pull out of me, and the clients are public code, so you can see exactly what runs on your device. I wrote up the full reasoning here: hoodik.io/blog/post-quantum-key-exchange-ml-kem-768 And if the ground ever shifts anyway, there is the part I care most about: the Export button. It gives you a runnable self-hosted copy of your instance. If I raise prices, or get bored, or get hit by a bus, you take your data and run it yourself. What it is not: I am a one person company in Croatia. I do not sell you an uptime SLA and I am not going to pretend I have a support team. What I have is the code in the open and an export that works. 100 GB is 9 EUR a month, 500 GB is 19 EUR, or 90 and 190 a year, 14 days free. The apps for iOS, Android and macOS are free. For the next month, the code PHFIRSTYEAR50 takes 50% off the first year on the annual plans. I would like feedback on two things. First, whether 14 days is long enough to actually move your files in and decide. Second, what would stop you trusting a small European vendor with your storage, because I would rather hear it here than guess at it. Code, auditable by anyone, CC BY-NC 4.0 licence: https://github.com/hudikhq/hoodik