Security
Security is the product, not a feature. Everything you share is encrypted in your browser with AES-256-GCM before it ever leaves your device, and the decryption key lives only in the link fragment — it never reaches our servers. We structurally cannot read your content. Secrets self-destruct on read or expiry, and you can revoke any link at any time.
Security disclosure
If you have discovered a security vulnerability, please report it responsibly to our security team. We take all reports seriously and will respond within 72 hours.
Contact security teamZero-knowledge architecture
All content is encrypted in the browser using AES-256-GCM via the Web Crypto API before transmission. Decryption keys live in the URL fragment and never reach our servers. We structurally cannot read your content — full technical details are on the How It Works page.