Encrypted in your browser, unlocked separately, and gone once read.
AES-256 encryption happens in your browser before anything is sent. In transit and at rest, the data is unreadable.
The unlock password is shared separately and never reaches our servers, so we physically cannot read your secrets.
Each note is permanently deleted the moment it is read, leaving nothing behind to be found later.
Even if unread, secrets expire automatically after a set time or view limit, so no secret lingers indefinitely.
Been sent a secure link? Just open it; there's nothing to sign in for.