You know the wait. You open Baidu Cloud to download something you stored there years ago, and the progress bar crawls. You sit there watching a file you already own arrive at a pace that feels like punishment, and somewhere in the back of your mind a thought forms that has nothing to do with speed: what if one day it doesn't arrive at all?

That is the fear worth taking seriously. Not the slowness. Slowness can be waited out. The real fear is opening the drive one morning and finding that something has been removed, or that the account itself no longer opens, and that there is nobody to argue with about it. The slowness is only the most visible reminder of the underlying arrangement: your files live inside someone else's business model, under someone else's rules, and the rules can change without asking you.

WATCH · 29 SECONDS

Almost everyone has a secret. Almost no one has a safe place for it.

See how Everkeep keeps your most private data offline — numbered, sealed, and watched.

Start protecting — CAD 187/yr

The throttle is the honest part

Let us start with the part that is not a scandal at all. Baidu Cloud slows downloads for non-paying users. That is its published way of doing business: free users get a slower lane, paying members get the fast one. It is not a malfunction, and it is not a secret. It is a design choice, and like all design choices it tells you something about whose interests the system serves.

When a service throttles you, it is reminding you, politely, that this is not your computer. Your hard drive does not slow down because you did not renew a subscription. Your drawer does not ask you to upgrade before you open it. A cloud drive can, because access to your own files is something it grants you, on terms it sets. The throttle is the lightest version of that power. It only makes you wait. But it is the same power, exercised gently, that can do much more.

Where "being seen" is part of the design

The heavier version is content review and removal. On a Chinese netdisk, the platform reviews what users store, and material it judges to be in violation of its rules can be blocked, restricted, or deleted. Users often discover this after the fact, sometimes without any notice at all. An account can also be suspended, and when an account goes, everything stored under it goes with it — not because anyone broke into your files, but because the account was the only door to them, and the door was closed.

Add real-name registration to that picture, and the shape of the problem becomes complete. An account tied to your verified identity means the things you store there are, by design, attached to a name. Being seen, in this setting, is not the result of a hack. It is not a breach. It is how the system is built: the platform knows who you are, it can inspect what you hold, and it can decide what stays.

None of this is an accusation about anyone's motives. Companies operating in China operate under rules that are public and well known, and they follow them. The point is not that the platform is hostile. The point is that placing something that must never be discovered in a place where inspection and removal are built into the rules is a mismatch — like whispering a secret into a room where a microphone is openly mounted on the wall, and then being surprised that the room was listening.

"It could just stop" already has a precedent

Anyone who lived through the 2016 wave of shutdowns and rectifications among China's personal cloud storage services knows the rest of the story. Services that millions of people had relied on stopped, or were forced to reorganize, and users scrambled to retrieve what they could before the doors closed. That history has been covered in detail elsewhere, and there is no need to retell it here. It matters for one reason only: it proves that "it could just stop" is not a paranoid fantasy. It has happened, in public, within living memory.

So the ledger for a netdisk looks like this. It can slow you down, by design. It can remove things, by rule. It can close your account, without negotiation. And the service itself can stop, by precedent. Each of these is tolerable for ordinary files — photos you could re-download, documents you have elsewhere. For the one thing that must not be found and must not be lost, each one is a door you do not control.

The familiar alternatives have their own doors

The usual escapes do not solve the problem; they move it. A phone's cloud album syncs your photos to a server under the same kind of terms. A network-connected NAS at home is still reachable from the network, which means it is reachable by more than you. A portable hard drive sitting in a drawer is offline, which is good — but a drawer is found by anyone who opens it, and a drive at home is lost to a flood, a fire, a burglary, or a move in which a box gets thrown away by mistake. A bank safe deposit box is more serious, but it still lives inside an institution's rules, its hours, its procedures, and its own record of who you are and what you came for.

Hiding something well is not the same as keeping it undiscovered. Every familiar tool either keeps a copy somewhere else, under someone else's rules, or keeps a single copy somewhere fragile, under nobody's care. Seneca's advice applies here with unusual literalness: we suffer more in imagination than in reality, he wrote — but the reverse is also true, and it is the trap of the familiar toolkit. We imagine our files are safe because nothing has gone wrong yet, and we mistake the absence of a disaster for the presence of a plan.

The value of a place with no rules about your files

The value of professional offline custody is not a feature. It is the absence of all of the above. There is no account, so there is nothing to suspend. There is no cloud copy, so there is nothing to review, throttle, or take down. There is no sync, so there is no second copy sitting on a server in another jurisdiction. The thing exists in one place, offline, and the rules that govern it are the ones you set when you entrusted it.

What that looks like in practice is deliberately unglamorous. Your own media, prepared by you, is received, numbered, and sealed under two people's verification, and photographed as a record of what went in and in what condition. It is then kept by people whose job is custody. Twice a year, the seal and the outside of the container are visually checked and photographed, without the container being opened or touched inside. Anything more hands-on happens only if you ask for it in writing, in advance.

That is the whole offer, and it is enough, because it answers the fear the throttle only hinted at. Your files are not "files the platform allows you to access." They are yours, sealed, numbered, and kept by people whose job is keeping — in a place where there is no throttle to lift, no review to pass, and no account that can be closed. The slowest download in the world cannot take anything from you if nothing you care about is waiting on someone else's server. The question was never how fast you can get your files back. It was whether anyone else gets a say in whether you do.