E2E encrypted chat · sealed on your device · your words never reach us readable
Every message is sealed on your device with the Signal protocol before it touches the network. Our server relays ciphertext between the people you trust — and understands none of it.
press send — or just keep scrolling
Before Bob's message touches any network, something happens right here on his device.
Signal double-ratchet. A fresh key for every message. The "3:" envelope is all that survives — and the key stays on his phone.
Two layers of locks cross the wire. Anyone listening — provider, wifi, anyone — records noise.
Our machine shuffles envelopes, never opens them. Every row in its window looks exactly like Bob's: ciphertext and routing metadata. No key exists here — nothing to read, leak, sell, or subpoena.
The envelope moves the instant Kate is reachable. We keep ciphertext for delivery — never a readable word.
Kate's device holds the only matching key in existence. The ratchet turns, the seal opens — and it lands on her screen.
Type in Kate's composer — the answer rides the same rail back, sealed on her phone, opened only on his. Scroll up and watch it fly.
Kate's composer is live — type, then scroll up ↑
Double-ratchet end-to-end encryption by default — there is no unencrypted mode. Keys are generated and stay on your device; the server never sees them.
Our relay stores sealed envelopes and routing metadata — your words cross it unreadable. No ads, no analytics resale, no "partners". Even our backups can't read your messages.
Delete for everyone removes the message on both sides — server included. Edit window of 15 minutes, re-encrypted end-to-end like everything else.
Send a message that lives nowhere readable. It's sealed on your device, and the key to open it rides only inside the link — never across our server. The note opens exactly once, then burns; left unread, it self-destructs on a timer you set (1–24h), taking the chat message with it.
runs in your browser · installs as an app · free
straight to our own server — no third-party form service, no tracking