Write it. Seal it.
Your browser generates a fresh encryption key and encrypts your text. Only the encrypted payload reaches our server.
One-time message ENCRYPTED
Opening your secret…
The encrypted message is retrieved once, then deleted from the server.
Click or tap the message to copy it. Copy before leaving this page.
Private by design. Gone after reading.
A secret shared.
A trace erased.
Some things aren’t meant to stay in a chat.
Send passwords, private notes, and sensitive details with a link that only opens once.
Browser encryptedOne-time accessNo sign-up
◇ YOUR BROWSER ENCRYPTED ↗ THEIR BROWSER
▣ Create a secretAES-256-GCM
Your secret is sealed.
Share this complete link with your recipient. Anyone with it can open it once. Don’t open it yourself.
◈ AES-256-GCM encryption⌁ Keys stay in the URL fragment↗ One retrieval. Then deleted.○ No accounts. No trackers.
Small link. Strong boundaries.
Three steps. One private exchange.
Send the complete link.
The key lives after the # in your link. Browsers don’t send that fragment to the server. Share it only with the intended person.
Opened once. Removed.
The server deletes the encrypted message as it is retrieved. Your recipient’s browser decrypts it locally. The link cannot be used again.
Understand your protection
Private, with clear limits.
Can Gemsbok read my message?
The application encrypts locally with Web Crypto AES-256-GCM. The server receives ciphertext and a random IV, never your plaintext or decryption key. As with any web encryption tool, you must trust the website delivering the code and your device.
What happens when a link is opened?
Opening a valid link automatically consumes it. The encrypted record is atomically deleted before it is returned. A connection failure or wrong key may therefore make the message unrecoverable. Link scanners that execute JavaScript may also consume a link.
Does self-destruct stop someone saving the message?
No. A recipient can copy or screenshot what they read. Deletion removes the active server record; it does not promise forensic erasure from infrastructure backups. Treat the full URL as a credential and share it carefully.
What information does the service receive?
The service receives encrypted text, an IV, expiry metadata, and ordinary network information such as your IP address. No analytics or third-party scripts run on this page. Keep secrets out of public chats and URL shorteners.