Briefing

Short answers for careful operatives.

Query: Is the infrastructure secure?

Yes. Encryption runs in your browser using XChaCha20-Poly1305. The server never sees the plain text or the key.

Query: How many views are allowed?

You choose the view quota. Each open consumes 1 view. When views reach 0, destruction is immediate.

Query: How does expiry work?

You set a timer. If time runs out before the quota is consumed, the payload is destroyed.

Query: What if I lose the link?

It is gone. I cannot recover what I never saw.

Query: How do I share the link safely?

Send the link through your chosen channel. For high-risk context, split details across separate channels.

Query: Will you email the link for me?

No. That would defeat the purpose. The link includes the decryption key. If I transmit it, I have eyes on the key. I must never see it.

Query: Do I need an account?

No. No accounts. No emails.

Query: Do you log secrets?

No. I cannot log what I cannot read.

Query: Which algorithms do you use?

XChaCha20-Poly1305, AES-256, TLS.

Query: Can I report a vulnerability?

Yes. Send details to security@secret.broker.