How does it work?
Your browser generates a random 256-bit key and encrypts the note with AES-256-GCM before anything is uploaded. The server only receives encrypted bytes. The key is put into the link after the #, a part browsers never send to a server.
What happens when a note is destroyed?
Notes live in the server's RAM only and are never written to disk. When the last view is used or the time runs out, the bytes are overwritten with zeros and removed. A restart wipes everything.
What does the custom password do?
Instead of a random key in the link, the key is derived from your password (PBKDF2-SHA-256, 600,000 iterations). Share the link and the password on separate channels. A wrong password still uses up a view.
Limits
–