Privacy

secrets encrypts passwords and other text in your browser. You send the encrypted reply yourself, through chat or a QR code. Nothing you enter is uploaded to our server.

What stays in your browser

New receiving links last seven days. Keys and encrypted replies are saved in this browser’s local storage, so you can close the tab or browser and return later. Reopening a link doesn’t extend its expiry.

Use the same browser and device to open the reply. Your saved links appear on the home page. Private browsing, clearing site data, or browser storage cleanup can remove them; there’s no recovery service.

A receiving key is deleted when you decrypt a reply, delete its link, or the app checks that it has expired. A damaged reply leaves the key available for retry. Deleting or using a key also clears open copies in other tabs. A closed browser can’t run cleanup, so stale records are removed when you next open the app.

Several links can be saved at once. Starting another request doesn’t overwrite an earlier one. Each tab remembers which saved link it has open; it doesn’t keep a separate private key.

The sender’s draft and the decrypted secret are never saved. After encryption, only the encrypted reply is saved until expiry or deletion. Decrypted text clears after two minutes, when you leave or refresh, or when you tap Clear secret.

Camera and clipboard

QR codes are made and scanned on your device. Camera images aren’t uploaded. The camera starts when you tap Scan reply QR and stops when you close the scanner, switch away from the page, or after two minutes.

Copying a secret may keep it in your device’s clipboard history. Clearing this page doesn’t clear your clipboard.

Hosting

Cloudflare hosts the app and sees requests, including your IP address and browser details. We don’t keep request logs, though Cloudflare may retain its own security and operational records.

The public key is in the part of the link after #, which browsers don’t send in HTTP requests. There are no accounts, analytics, tracking cookies, or third-party scripts.

How encryption works and what it protects: Security.