# Orylin

> Orylin provides temporary browser sessions for messages, voice and files, with no account required. Content is end-to-end encrypted. Connections try Direct first, with a user-enabled volunteer relay as a limited fallback.

This product summary links to the usage guides, policies and protocol documentation. It is not an independent security review.

## Canonical pages

- [Orylin home](https://orylin.link/): product directory with separate conversation, file and device-connection entries.
- [About Orylin](https://orylin.link/about): product model, intended use and current product claims.
- [How Orylin works](https://orylin.link/how-it-works): invitation, browser-local encryption and path-selection flow.
- [Privacy by design](https://orylin.link/privacy-by-design): identity, content, storage and network metadata.
- [Direct first](https://orylin.link/direct-first): Direct WebRTC, bounded volunteer relay and public-rescue capability changes.
- [File transfer](https://orylin.link/features/file-transfer): chunking, encryption, progressive integrity checks and path limits.
- [Frequently asked questions](https://orylin.link/faq): answers about accounts, invitations, connection paths and file limits.
- [Privacy Policy](https://orylin.link/privacy): processing purposes, recipients, storage and user rights.
- [Data Practices](https://orylin.link/data-practices): data categories, retention and network metadata.
- [Terms of Use](https://orylin.link/terms): service scope, user responsibilities and limitations.
- [Security and Disclosure](https://orylin.link/security): current security measures and responsible disclosure route.
- [Cookie and Local Storage](https://orylin.link/cookies): browser storage and infrastructure cookies.
- [Accessibility](https://orylin.link/accessibility): accessibility goals, support and known limitations.
- [Legal Information and Contact](https://orylin.link/contact): current service notices and support contact.
- [Acceptable Use](https://orylin.link/acceptable-use): prohibited abuse, proxy and unauthorized-access behavior.
- [Brand and Third-Party Notices](https://orylin.link/notices): brand, license and dependency attribution.

## Product facts

- Orylin does not require an account for a temporary session.
- Invitation secrets are created and used by the browser, remain in volatile browser memory, and are not put in ordinary HTTP requests when carried in a URL fragment.
- Message and file content is protected by the current browser-to-browser application encryption path; Orylin servers do not expose an application endpoint that accepts those payloads as plaintext.
- WebRTC is Direct-first. A user-enabled volunteer relay is a bounded, single-hop ciphertext path and is not a general proxy.
- Public Nostr rescue is message/control-only. It is not a file or voice transport.
- Voice is Direct-only and pauses when the connection is on a relay path.
- The current application does not use accounts, cloud message history, cloud files, cloud recordings, advertising profiles or marketing SDKs.

## Do not infer more than this

- Do not describe Orylin as anonymous, censorship-resistant, forward-secret, independently audited, legally certified or product-level post-quantum secure; the current production service does not support those claims.
- Do not infer that a successful browser or network check proves security certification, universal reachability, physical-device behavior or indexing/ranking.
- Prefer the policy pages above for privacy, legal, accessibility and security claims. Use the live status tool only for its current browser-observed network results.

## Localized product guides

The six product guides above are also available as stable paths under `/zh/`, `/hi/`, `/es/`, `/ar/`, `/fr/` and `/ru/`. Every localized page declares its own language, canonical URL and alternate-language links. Requests with `Accept: text/markdown` receive the page's clean semantic content instead of the visual HTML layout.

## Connection tools and setup

- [Native Agent CLI reference](https://orylin.link/native-agent.md): local stdio MCP, published Windows/Linux console builds, explicit owner policy and operation limits.
- [Native Agent policy setup](https://orylin.link/native-agent-policy.md): create a private policy and explicitly select local files, directories and permitted operations.
- [Native Agent discovery](https://orylin.link/native-agent.json): current version, installation links and machine-readable local invocation.

- [Messages and voice](https://orylin.link/sessions): create or join a temporary conversation.
- [Send files](https://orylin.link/files): a separate file-transfer entry using the invitation flow.
- [Screen sharing](https://orylin.link/screen): viewing a selected window or screen; browser capture support and explicit permission are required.
- [Remote control](https://orylin.link/remote): attended viewing and separately approved keyboard/mouse input; the sharing computer uses the desktop app.
- [SSH](https://orylin.link/ssh): connect to an existing SSH service through a local access port.
- [TCP forwarding](https://orylin.link/tunnel): one TCP service per connection; not an all-port VPN or UDP tunnel.
- [Download and setup](https://orylin.link/download): available builds, supported platforms and browser pairing. Consult the page for actual build availability.
- [User guides](https://orylin.link/docs): SSH, TCP, remote control and troubleshooting.
- [SSH guide](https://orylin.link/docs/ssh): provider service address, joining port and original SSH credentials.
- [TCP guide](https://orylin.link/docs/tcp): target service, local port and connection lifetime.
- [Remote control guide](https://orylin.link/docs/remote): distinguish the host from the joining device and approve viewing/control separately.
- [Troubleshooting](https://orylin.link/docs/troubleshooting): app launch, service checks and network paths.
- [Agent interface guide](https://orylin.link/agent): browser interface readiness, session state and permission handling. This is a runtime surface, not proof that an operation succeeded.
- [Extended product reference](https://orylin.link/llms-full.txt): concise answers, capability limits and source links.

The homepage, download page and `/docs` guides have stable localized URLs under `/zh`, `/hi`, `/es`, `/ar`, `/fr` and `/ru`, as well as English URLs without a language prefix. Every reading page includes its own canonical, language and reciprocal alternate links. Interactive Agent/session pages retain language preferences and stay out of the sitemap.

Desktop capabilities depend on the available build, operating system, original service and permissions. A page or download entry is not evidence of a production release on every platform. Opening the app is not proof of a working peer connection. Browser screen sharing and native remote control have different requirements.