ephemera
Share secrets that vanish. Text, links, and files that self-destruct after they're seen — and can't be read by the server that serves them.
Zero-knowledge encryption
Drops are AES-256-GCM encrypted in your browser. The key rides in the URL fragment or a passphrase — the server only ever stores ciphertext.
Burns after reading
Every drop expires by time, view count, or both. A reveal step keeps link-preview bots from silently consuming one-time secrets.
Actually ephemeral
A retention sweep blanks dead ciphertext and prunes view logs on a schedule. Expired means gone — not soft-deleted forever.
Yours to run
Self-hosted, invite-only, single container plus Postgres. Your secrets never touch a third party.
How it works: your browser seals the secret with a key the server never sees → you share one link → the recipient reveals it once → it's ash.