Secret Inbox

Privacy

Privacy policy

Updated 28 October 2026

The short version

  • No accounts, no email, no phone number.
  • Messages and private replies are end-to-end encrypted: we store them but cannot read them.
  • Everything disappears after 3 days and is erased within 7 days.

What we store

  • Your link: the name, question and colour you chose, the answers you decide to show publicly, a public key, and your private key locked with your recovery key (which we never receive). Anyone with your link can see the name, question and shown answers.
  • Messages and replies: encrypted text, the time, and random ids that connect a reply to its message.
  • A blocking tag: a scrambled, one-way code made from the sender’s network and the link, encrypted inside the message. It lets an owner block someone without either side learning who they are. It is erased with the message; when an owner blocks, the code stays in that link’s settings until the link is deleted or expires.
  • Activity: anyone who has a link could see how many messages it received and when, but never their text.
  • Reports: what you send us in a report, kept up to 30 days to deal with it.

What stays on your device

Your recovery key, your inbox list, messages you sent and their reply keys, and your theme choice are kept in your browser’s storage. Clearing your browser data removes them.

Notifications

Only if you turn them on. We then keep your browser’s push address (given by Google, Apple, Mozilla or Microsoft for your browser) in a private store, with no name or message. The alert we send through it is empty: your phone shows a fixed text such as “New anonymous message”, so no message, name or link ever reaches the push service. Turning notifications off, deleting your link or 30 days without use removes the address.

What we do not keep

We do not store your IP address with any message, and we have no way to tell an owner who wrote to them. Our hosting provider, Cloudflare, processes connection details such as IP addresses to deliver and protect the site, under its own privacy policy. The quick human check uses Cloudflare Turnstile.

Analytics and ads

Only our information pages (home, the guide and safety) may use Google Analytics (page views only) and Google AdSense ads. The pages where you write, read, reply to or report messages load no Google code at all, and no message text is ever sent to Google.

Requests from authorities

We can only share what we hold, described above: encrypted messages we cannot read, link details and reports. We act on valid legal requests and remove links that break the rules.

Contact

Use the report form for any privacy request.