Send a message that destroys itself the first time it is read.
No account needed. Free forever plan.
Encrypted in your browser before anything is sent. Burn after read is on for every anonymous secret.
One URL. The key after the # stays in the browser and never reaches our servers.
The first open burns the ciphertext. A second visit, by anyone, meets the destroyed page.
Browser-side encryption shipped on 29 September 2026. Secrets created before that date were stored as plaintext until they expired, and a file's name, size and type are still visible to us. Read the full security model.
You write the message and get a link. The text is encrypted in your browser with AES-GCM-256 before it is sent, the key stays in the link after the #, and the server keeps only ciphertext. When the recipient opens the link and presses reveal, the message is shown once and the stored ciphertext is overwritten in the same operation. The link is spent, and every later visit meets a burned page with HTTP status 410.
Messaging apps with disappearing messages need both people on the same app and still keep the message until the timer runs out. A self-destructing link works across email, SMS and any chat tool, because the message lives in the link rather than in the app. The recipient needs a browser and nothing else.
An unread anonymous message expires after seven days. A free account lets you set one hour, 24 hours or seven days and revoke a message before it is read. Pro adds a passphrase, a custom expiry and the audit timeline.
It removes the stored copy after one read and makes a leaked link worthless after that. It cannot stop the reader from taking a screenshot, and it cannot protect a link that was forwarded before it was opened. For anything sensitive, keep the expiry short and, on Pro, send a passphrase by another route.
Pro, $29 a month, adds a passphrase on every secret, a custom expiry date and time, and the audit timeline that records each view, burn and revoke. See plans.