Operation process
Data input
You enter text or upload file in browser
Data remains in browser memory and is not sent to server
Encryption
Data is encrypted directly in your browser
AES-256-GCM is used with random key generated by Web Crypto API
Upload to server
Encrypted data is saved on server
Server receives only encrypted blob, key remains in browser
Link creation
Unique link with decryption key is generated
Link contains record ID and encryption key in URL fragment
Retrieval and destruction
When link is accessed, data is decrypted and deleted
Decryption happens in recipient's browser, record is deleted from server
Security features
AES-256 encryption
Banking standard data encryption
Each secret is encrypted with unique 256-bit key
Zero knowledge
Server never knows your data content
Encryption key never leaves your browser
One-time use
Link works only once
After first view, data is permanently deleted from server
Limited lifetime
Automatic destruction after set time
Even if link is not opened, data will be deleted after TTL expires