Secrets

Privacy Policy

Last updated: March 31, 2025

Overview

Secrets is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our service.

Information We Don't Collect

We intentionally collect as little information as possible:

  • No personal information
  • No user accounts
  • No tracking cookies
  • No analytics
  • No IP logs

How the Service Works

  1. Message Encryption
    • All messages are encrypted in your browser
    • Encryption keys never reach our servers
    • We only store encrypted data
  2. Message Storage
    • Encrypted messages are stored temporarily
    • Messages are permanently deleted after being viewed
    • All messages automatically expire after 48 hours
    • We cannot read or recover deleted messages
  3. Technical Data
    • We store only the encrypted message and its expiration time
    • No metadata about senders or recipients is kept

Data Security

  • End-to-end encryption using AES-GCM
  • Messages are encrypted before transmission
  • Only the person with the correct link can decrypt messages
  • Messages are permanently deleted after viewing

Third-Party Services

We use AWS RDS Postgres for data storage.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new Privacy Policy on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

While we don't collect personal information, we will comply with valid legal requests from law enforcement. Note that we cannot provide decrypted message content as we don't have access to encryption keys.