Ask the hamster

Two things in Japanese: 杉 (sugi) is the Japanese cedar, which is why the hamster has a cedar sprout on its head, and 〜すぎ (-sugi) means “too much”, as in かわいすぎ, “way too cute”. The hamster stuffs everything into its cheeks, and when it has stuffed too much it says “too much!”.

No. You can upload without logging in; your history stays in this browser (“My files”). Once you log in, new uploads are recorded under your account.

Files kept “forever” stay until they break the terms or you delete them with their delete token. Files kept for 1 hour, 12 hours or 3 days get a tmp.sugi.moe link that stops working the moment it expires; the file itself is cleaned up within about ten minutes after that.

Images and short videos: PNG, JPEG, WebP, GIF, AVIF, MP4 and WebM, recognised by their content rather than the file name. Up to 200 MB per file; the website splits anything over 90 MB into chunks for you. Everything else (SVG, HTML, PDF, archives, executables…) is refused.

Every upload is public: anyone with the link can open it. Links are random and never listed anywhere, but cute link names come from a much smaller pool and are easier to guess. Do not upload pictures that show personal details, IDs, passwords or keys.

Find it under “My files” and press ×. The delete token lives only in the browser you uploaded from, so if you switch browsers or clear its data you can no longer delete it; export your history first. For API uploads, call DELETE /api/files/:id with the delete_token you got back. Links in the old format (sugi.moe/.png) have no delete token; write to hi@sugi.moe to have one removed.

No, the history lives in this browser only. Use “Export” on the “My files” page to save a copy.

When you upload on the website, the “Strip photo location” option (on by default) removes the EXIF and XMP metadata from JPEG, PNG and WebP files in your browser before upload; that is where GPS position, camera model and capture time live. For JPEG only the orientation is kept. AVIF files, videos and anything uploaded through the API are left untouched.

Not your IP address. With each file we keep its upload time, its file name if it had one, and an HMAC fingerprint of the uploader's IP made with a server-side key, which cannot be turned back into the IP. The fingerprint is only used to find and remove everything from the same source when there is abuse. The site has no analytics and no ads. sugi runs on Cloudflare, so requests pass through Cloudflare's network. See the privacy policy.

Yes. Every link is a direct link and hotlinking is allowed. You can copy them as Markdown, HTML or BBCode right after uploading.

Send the link to abuse@sugi.moe and it will be removed once confirmed. Content served through Cloudflare's cache is also checked by Cloudflare's CSAM Scanning Tool.

For now the maintainers pay for it themselves. There are no ads and no data is sold.