Secret Inbox

About

About Secret Inbox

Secret Inbox gives you one private link. Share it, and anyone who opens it can send you a message without signing in and without you knowing who they are.

What it is

You choose a name, a question and a colour, and you get a link such as https://secret.whisperperks.com/u/…. People write to you from that link. You read the messages in your inbox, answer privately, and decide which answers, if any, appear on your link page. It is free, has no sign-up and no app, and is meant for people aged 16 and older.

How anonymity works

A sender never signs in and gives no name, number or account, so the owner has nothing to identify them with. To let an owner stop abuse, each message carries a scrambled, one-way tag made from the sender’s network and the link; it is encrypted inside the message and only lets a block work. It cannot be turned back into a person.

That is anonymity towards the owner. It is not magic: the hosting provider, Cloudflare, processes connection details to deliver and protect the site, and abuse such as threats can be reported to the police. We describe exactly what we keep on the Privacy page and do not claim more than that.

How end-to-end encryption works

  • When you make a link, your browser creates a key pair from a random recovery key. The public key goes to the server; the private key never leaves your browser unlocked.
  • A sender’s browser seals the message with your public key before it is sent, using standard Web Crypto (ECDH P-256, HKDF-SHA-256 and AES-GCM). The server stores sealed text it has no key for.
  • Your private replies are sealed the same way for the sender, who keeps a key for that message on their own device.
  • Your recovery key is the only way to open your inbox on another device. If you lose it, nobody can recover your messages, including us.

What is public on purpose: your link’s name, question and colour, the answers you choose to show, and their rating totals.

How long data lasts

  • Messages, replies and public answers disappear after 3 days and are erased from storage within 7 days.
  • A link that receives no messages for about a week is removed.
  • Reports are kept up to 30 days. Notification addresses, if you turn notifications on, are removed when you turn them off, when you delete your link, or after 30 days without use.

What we refuse to do

  • We never write fake messages to keep you coming back. Every message in an inbox was written by a real person.
  • We never sell or show hints about who sent a message.
  • We never need to read your messages and have no way to.
  • We do not allow threats, bullying, hate, sexual messages or private information, and we remove links that break the rules.

Who makes it

Secret Inbox is made and run by whisper perks, based in Faisalabad, Pakistan. The site is designed and developed by Usman Hussnain. See more websites by whisper perks.

Questions or feedback? Go to Contact, or read How to use and Safety.