No accounts · no history
One link. One PIN.
Then gone.
Create a private link, choose a 4-digit PIN, and share it with one person. They type the PIN to get in, and only one message is ever on screen at a time.
Create your private link
Pick a 4-digit PIN and share the link with one person. They need the PIN to get in, and only one message is ever on screen at a time.
How it works
Step 1
Pick a 4-digit PIN
It never leaves your browser: 600,000 PBKDF2 rounds turn it into the key that seals every message in the room.
Step 2
Share one link
Anyone with the link is asked for the PIN before they get in. Send the PIN through a different app when you can.
Step 3
One message at a time
Whatever is on screen is destroyed the moment a new message arrives, from either side. Five wrong PINs ends the room.
What this cannot protect you from
Four digits is convenient, not fortress-grade
10,000 combinations is small. That is why the room dies after five wrong attempts and idle rooms expire after 24 hours. For real secrets, do not rely on a PIN alone.
Screenshots and cameras
A reader can photograph the screen. Nothing a website can do changes that.
Copy, paste, forward
Once someone can read a message, they can retype it anywhere. Burn-on-read limits the window, not the reader.
Metadata still exists
No IPs, no accounts, no content, but the database does know that a room existed and when a message was delivered and read.
Questions people actually ask
What happens after someone reads my message?+
It is gone. The ciphertext is deleted the instant it decrypts in their browser, and the next message, from either side, clears the screen. There is no history to scroll back through.
Can you read our messages?+
No. The key is derived from the PIN inside each browser and never reaches the server. We store sealed bytes plus an encrypted check blob: never the PIN, the key or the plaintext.
What if someone guesses the PIN?+
They get five tries. The fifth wrong attempt destroys the room for everyone, so guessing burns the target instead of opening it. Choose a PIN you have not used elsewhere.
Is the link itself enough to get in?+
No. The link identifies the room and the PIN unlocks it, so intercepting the URL alone reveals nothing.
Want the mechanism, the schema and the threat model in full?
How it works