We use exactly one cookie - the one that keeps you logged in. No tracking, no analytics, no ads, no selling your soul. There's nothing to toggle off, because turning it off would just log you out. So… enjoy the cookie? The boring details.
Trinetra
Fast, private image hosting with an API.
or
Enter the email address on your account and we'll send you a reset link.
Recover your account with something you already have.
or
Enter your username and a code from your authenticator app, or one of your backup codes.
Your password has been reset. Copy it now, it is shown only once:
Sign in with it, then change it from your profile. If you have two-factor authentication, you will still be asked for it.
Trinetra accepts common image formats - JPEG, PNG, GIF, WebP and AVIF. Every upload is verified by its actual file contents (magic bytes), not its name or claimed type, so only genuine images are stored.
Is there a limit to file size or how much I can store?
Yes. Each upload has a maximum file size, and every account has a total storage quota. Your current usage and quota are shown on your Dashboard. Administrators can adjust per-user quotas.
How does Trinetra keep my images private?
Trinetra is self-hosted - your images live on this server, not a third party. Each image is stored under its owner and is only tied to you in the admin view. Accounts can be secured with passwordless passkeys and two-factor authentication.
Can I share my hosted images with others?
Yes. Every image gets a clean, shareable link (/i/<id>) that anyone can open. The URL never reveals who owns the image.
Is there an API?
Yes. Create an API key under Account › API keys and upload programmatically. Keys are scoped: you tick exactly what a key may do (for example upload only) and can give it an expiry. The API tab has a sandbox to try requests from the browser, plus the reference: every endpoint, the permission it needs, and the rate limits.
Can I organise images into folders?
Yes. Create folders in the Gallery and move images between them. Deleting a folder leaves its images in place (they become uncategorised).
How do I secure my account with a passkey or 2FA?
Open Profile Security to add a passkey (for passwordless sign-in) or enable an authenticator-app TOTP code, and to generate one-time backup codes.
How do I delete an image or my files?
Select images in the Gallery and use the actions menu to delete them, or open an image and remove it there. Deletion is immediate and removes the file from the server.
What content is allowed on Trinetra?
Trinetra is a private image host. You may upload images you have the right to store and share. You must not upload anything that is unlawful or infringes someone else's rights - in particular:
content that infringes copyright, trademark, or other rights;
child sexual abuse material (CSAM) or any other illegal content;
harassing, threatening, or hateful material;
malware, phishing, or anything used to attack or abuse the service or others.
The full rules are in our Terms of Service. You are solely responsible for what you upload.
How is content moderated, and what happens if I break the rules?
Administrators can review and remove content that violates our Terms or the law. If one of your images is removed by a moderator, you'll see a message explaining why the next time you open Trinetra, and you'll be asked to acknowledge it.
Accounts that break the rules may be suspended - a suspended account can't sign in or use the API, and its images stop being served. Where content is illegal, we remove it and report it to the relevant authorities.
How do I report content that breaks the rules?
Use the Report Abuse page - it has a short form where you can submit the link(s), choose a category, and describe the problem. You don't need an account to report. Every report is reviewed and handled confidentially.
"Trinetra" ("the service", "we", "us") is a self-hosted image-hosting application operated by Trinetra - Image Hosting. By creating an account or uploading content, you agree to these Terms. If you do not agree, do not use the service.
2. Eligibility & accounts
You must be at least 16 years old, or the minimum age of digital consent in your country, to use the service. You are responsible for keeping your password and any two-factor or passkey credentials secure, and for all activity that happens under your account. Tell us promptly if you believe your account has been compromised.
3. Acceptable use
This is a privately operated, self-hosted instance with open registration. You agree not to upload, store, or share content that:
is unlawful, or infringes anyone's copyright, trademark, or other rights;
depicts child sexual abuse material (CSAM) - this is never tolerated and is reported to the authorities;
is harassing, threatening, defamatory, or incites violence or hatred;
contains malware, phishing, or is used to attack, overload, or probe the service or others;
attempts to bypass quotas, rate limits, authentication, or other technical controls.
You are solely responsible for the content you upload and for having the right to upload it.
4. Your content
You keep ownership of everything you upload. You grant us only the limited permission needed to store, process, and serve your content so the service can function (for example, generating thumbnails and delivering images via share links). Anyone with an image's share link can view that image, so treat share links as you would the file itself. We claim no other rights to your content.
5. Service availability
The service is provided on an "as is" and "as available" basis, without warranties of any kind. It is self-hosted and may be unavailable for maintenance, updates, or reasons beyond our control. We do not guarantee that content will be stored without loss, and you are responsible for keeping your own backups of anything important - you can export your data at any time from your profile's Your data tab.
6. Suspension & termination
We may suspend or remove content, or suspend or delete an account, that violates these Terms or applicable law, or that threatens the security or operation of the service. You may delete your own account at any time from your profile, which permanently removes your data as described in our Privacy Policy.
7. Limitation of liability
To the maximum extent permitted by law, we are not liable for any indirect, incidental, or consequential damages, or for loss of data or content, arising from your use of the service. Nothing in these Terms limits liability that cannot be limited under applicable law.
8. Changes
We may update these Terms; the "last updated" date above reflects the latest version. Continued use of the service after a change means you accept the updated Terms.
This service ("Trinetra", "we", "us") is a self-hosted image-hosting application operated by Trinetra - Image Hosting (the "data controller"). You can contact us at [email protected].
2. What data we collect
Account data: your username, optional display name, optional email address (which we verify by sending a confirmation link before it is added), and a securely hashed password. We never store your password in plain text.
Images you upload: the image files themselves, plus metadata (file name, type, size, SHA-256 hash, upload time, and the folder you place them in).
Share-link history: when you regenerate an image's share link, we keep a record of the previous link(s) so we can investigate abuse reports. This history is removed when you delete the image or your account.
Security data: two-factor settings, passkey credentials, and API keys (we store only hashes/public keys, never raw secrets).
Technical data: a single session cookie to keep you logged in.
Login & registration log: for each successful login and when you register, we record the IP address you connected from, your browser's user-agent, and the time, stored chronologically. This is used to investigate abuse and keep the service secure. We keep these records for a limited period (see “How long we keep it”) and do not otherwise track your browsing.
3. Why we use it (legal basis)
Under the EU General Data Protection Regulation (GDPR / DSGVO), we process your data on the following legal bases:
To provide the service you signed up for - performance of a contract (Art. 6(1)(b) / Art. 6 Abs. 1 lit. b).
To keep accounts and the service secure, and to investigate abuse - legitimate interests (Art. 6(1)(f) / Art. 6 Abs. 1 lit. f).
To meet legal obligations, where applicable (Art. 6(1)(c) / Art. 6 Abs. 1 lit. c).
We do not sell your data or use it for advertising.
4. Who can see your data
Images you upload are reachable by anyone who has the image's share link. Within the application, only you and an administrator can see which images belong to you. Administrators of this instance can access account and image data for moderation and operation. We do not share your data with third-party processors: the service, including the mail server that sends you notification emails, runs entirely on our own self-hosted infrastructure (mahesvara.cloud). We disclose data only where legally required.
5. How long we keep it
We keep your account data while your account exists. Login and registration log entries (IP address, user-agent, timestamp) are automatically deleted after 90 days, in line with the data-minimisation and storage-limitation principles (Art. 5(1)(c) and (e) / Art. 5 Abs. 1 lit. c und e DSGVO). Prepared data exports are kept for at most 72 hours before automatic deletion. When you delete your account, your data - including your login/registration log - is removed immediately and is not retained in backups.
6. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. You can exercise the main ones yourself:
Access & portability: download a copy of your data from your profile's Your data tab.
Erasure: delete your account (and all associated data) from the same tab.
Found content on Trinetra that breaks our Terms of Service - for example copyright infringement, harassment, or anything illegal? Fill out the form below. You do not need an account.
Thank you - your report has been submitted. We review every report and will take action where content violates our Terms or the law. We may contact you at the email you provided if we need more detail.
Child sexual abuse material (CSAM) and other seriously illegal content are removed immediately on discovery and reported to the relevant authorities. If you encounter such material, report it to us and, where appropriate, to law enforcement directly.
What happens next
We review every report and take action where content violates our Terms or the law, which may include removing the content and suspending the responsible account. We aim to respond to reports promptly. Reports are handled confidentially.
Found a bug, have an idea, or just want to tell us something? We would love to hear it. You do not need an account, and an email is optional - leave one only if you would like a reply.
Thank you - your feedback has been sent. We read everything. If you left an email, we may reach out if we need more detail.
Your image vault, overview, gallery and API in one place.
Storage
—
⏳ Quota request - awaiting admin approval.
—
Images
—
Folders
—
API keys
—
Avg size
—
Largest
—
Quota used
By type
No images yet.
Recent uploads
Nothing uploaded yet - head to the Gallery tab.
Feedback
Found a bug, have an idea, or want to tell us something? Send us feedback - we read everything.
Upload
Drag & drop images, or
Uploading…
Uploads go to the selected folder. Allowed: JPEG, PNG, GIF, WebP, AVIF - type is verified by file content, not the filename. Max — per image.
Your images
0 selected
No images here yet - drag one in above.
Click a thumbnail to preview · Ctrl/Shift-click to multi-select · right-click for actions
API sandbox
Send real requests to this instance from here, as one of your keys. Paste the key below: every request runs with that key's scopes and nothing else, never with your login session, so a key that may only upload cannot delete anything from here either. The key stays in this box and is never stored. Requests are real: an upload really uploads and a delete really deletes. Create and revoke keys under Account › API keys.
Paste a key to send requests
The same request as curl
API reference
Profile
Avatar
JPEG, PNG, GIF, WebP or AVIF · max 2 MB.
Email
Optional. Used for export-ready notices and your Gravatar (when you haven't uploaded an avatar). A new address must be verified before it's added.
Enter the code from the verification email if the link didn't work:
Password
Security · Two-factor authentication
Authenticator app (TOTP)
Not set up.
Passkeys
Sign in with your fingerprint, face, or security key, and skip your password.
API keys
A key can only do what you tick here, and stops working when it expires. Pass it as Authorization: Bearer <key> or X-API-Key: <key>. Try it out in the API sandbox.
New key - copy it now, it's shown only once:
Exports
Metadata export
Instantly download a JSON file with your profile, folders, and a manifest of every image (id, size, type, SHA-256 and public link). No image files, no passwords or secrets.
Full export (with image files)
A complete copy of your account, including every image file, packaged as a ZIP. Large libraries take a while to prepare, so this runs in the background - we'll notify you when it's ready and show a download button here. The link stays valid for up to 72 hours. You'll verify with a passkey or authenticator code to request and to download.
Browser notifications
Get a browser notification when a background export is ready, even if this tab is closed.
Danger zone
Delete account
Permanently delete your account and all of your data: every uploaded image, your folders, API keys, passkeys and profile. This cannot be undone. You'll be asked to verify with a passkey or authenticator code first.
Set up two-factor
An administrator requires 2FA on your account. Add a method to continue.
Request more storage
Ask an admin to raise your storage limit. Both fields are required.
Resolve report
Record how this report was handled. Both fields are required - this is a permanent admin audit trail (not shown to the reporter or the reported user).
Warn user
This message is shown to the user in a mandatory-acknowledge warning. Write it in plain language addressed to them.
Welcome to Trinetra
Fast, private image hosting with an API. Here's a quick tour - click anything to jump straight there. You can reopen this from “Getting started” anytime.
A message from the moderators
Before you create an account
Trinetra is a private image host. By registering you agree to our Terms of Service and Privacy Policy. In particular, you must not upload, store, or share content that:
is unlawful, or infringes anyone's copyright, trademark, or other rights;
depicts child sexual abuse material (CSAM);
is harassing, threatening, defamatory, or incites violence or hatred;
contains malware or phishing, or is used to attack or probe the service or others;
attempts to bypass quotas, rate limits, authentication, or other controls.
If prohibited content is discovered, the responsible account will be suspended and, where the content is illegal, we will report it to the relevant authorities. You are solely responsible for everything you upload.
Admin console
Site-wide overview, user management, activity and system info.
At a glance
—
Users
—
Admins
—
Images
—
Folders
—
API keys
—
Avg image
Total storage
—
Storage by type
No images yet.
Top users by storage
No users yet.
Newest users
No users yet.
Users
User
Email
Images
Storage
Role
Actions
Images
This user has no images.
Recent activity
No activity matches.
Abuse reports
When
Category
Reported link(s)
Details
Reporter
Status
Actions
No reports.
Look up image from a reported link
Reported link or id
Paste a reported share link (or just its id) to find the current image and its owner, even if the owner regenerated the link to break it. This is a lookup tool (view / delete the image); it does not resolve the report - use “ Done” on the report row for that. Requires a fresh security check.
