Encrypted self-destructing messages. Read once, then gone forever.
Your message stays in your browser — it's never sent as plaintext.
AES-256-GCM encryption creates a locked ciphertext. The key never leaves your device — it is never sent to any server.
Only the encrypted blob is sent to the server. The decryption key lives in the link's # fragment — a part of the URL that browsers never transmit to the server.
The decryption key is extracted from the URL # fragment locally. The server never sees the key — only encrypted data.
The encrypted message is retrieved and permanently deleted from the server in one atomic operation.
The message is unlocked locally and displayed. It can never be read again — it's gone forever.
The server only stores encrypted data it cannot read. Even if compromised, your messages remain private.
This message can only be read once. After you read it, it will be permanently destroyed.