once — share a secret, once

how this works

Write or attach. Type a secret and/or add a few photos.
It encrypts in your browser. Your passphrase derives the key (PBKDF2, 600k rounds → AES-256-GCM). The server only ever stores ciphertext — never your text, photos, or passphrase.
Share the link & passphrase separately. Send the link one way (email/chat) and the passphrase another (text/call), so no single channel ever holds both halves.
It self-destructs. After the first read — or when the timer expires — the secret is atomically wiped from memory. Gone for good.

// secret payload // attach photos — optional

// passphrase — send this over a different channel than the link

// self-destruct

// reads allowed

// received a one-time link?