Loading...
Loading...
Seriously. Here is the technical breakdown of our Zero-Knowledge architecture.
Your browser generates a random key. The text is encrypted using AES-256locally before it ever touches the internet.
The decryption key is part of the URL fragment (after the #). Browsers never send the fragment to the server. We physically cannot see the key.
Your data is encrypted in your browser using AES-256 before it ever leaves your device.
The encryption key is stored in the URL hash (#), which browsers never send to servers. We cannot decrypt your messages.
When a message is read, we use Redis GETDEL — an atomic operation that fetches and deletes in a single step.
Each link works exactly once. After viewing, it's gone forever. Even intercepted links are useless.
We don't log IP addresses or any identifying information. There's no way to trace a message back to you.
Even if never read, messages expire after your chosen time period (1 hour to 7 days) and are permanently deleted.
You type a note. Your browser creates a unique key and encrypts the text.
Only the encrypted blob is sent to our Upstash Redis database.
The blob is stored with a strict TTL (Time-To-Live). We cannot read it.
When the link is opened, we send the encrypted blob to the browser.
Our server immediately deletes the blob from the database (Atomic GETDEL).
The recipient's browser uses the key from the URL to unlock the message.