From the moment you paste a secret to the moment it's destroyed, here's exactly what happens behind the scenes.
Type or paste any text — a password, an API key, a private note — or upload a file up to 10MB. You choose whether the link expires after one view, after a set time, or both.
Before anything is written to storage, the content is encrypted using AES-256-GCM, an authenticated encryption standard widely used for protecting sensitive data in transit and at rest. The plain-text version never reaches our database.
Each secret is assigned a randomly generated identifier that's effectively impossible to guess. This link is the only way to access the secret — there's no separate login, search, or browse feature that could expose it.
When the link is opened, the server decrypts the content just long enough to display it, then immediately deletes the encrypted record from the database. If the recipient refreshes the page or tries the link again, there's nothing left to retrieve.
There's no recycle bin, no audit trail showing what the secret was, and no backup snapshot retaining a copy. Deletion is immediate and irreversible, whether the secret was viewed or simply expired.
You can add a password to a secret on top of its expiry settings. The recipient needs both the link and the password to unlock the content, which is useful when you're sending the link and the password through two different channels — for example, the link by email and the password by text message.
Once a secret is encrypted, we don't have a convenient way to read it back outside of the normal reveal flow — and after that flow runs once, the encrypted data is deleted entirely. Server logs capture basic request metadata for abuse prevention (see our Privacy Policy), but never the secret's contents.
Ready to try it? Create your first secret link →