One Time Secret - Tool - by Alexandru Jungean

These documents describe the live architecture of this service: browser encryption, at-most-once ciphertext release, no accounts, no cookies, and no third-party scripts on create or reveal. They are not a certification and they do not promise exactly-once delivery or that the operator can read or recover a secret.

Version 1.1.0 · Effective 22 August 2026

• Terms of Use

  The contract for using this free, browser-encrypted, at-most-once secret-link service.

• Privacy Policy

  GDPR information about what this service processes, what it never sees, how long data lasts, and your rights.

• Cookies and Local Storage

  This application does not set cookies and does not use localStorage or sessionStorage.

• Acceptable Use Policy

  What you may not store or do with the service, and how reports are handled when we cannot read plaintext.

• Legal Notice

  Identity of the information-society service provider, contacts, and Digital Services Act points of contact.

• Illegal Content Notices

  How to notify alleged illegal hosted ciphertext under the Digital Services Act, and what we can actually do.

• Vulnerability Disclosure Policy

  How to report a security issue in good faith. Complements the published security.txt file.

• Infrastructure and Subprocessors

  Who hosts the application and the database, where, and what each recipient can see.

• Law Enforcement Guidelines

  What this service can and cannot produce in response to lawful process.

• Data Processing Addendum

  Article 28 terms for professional customers who are controllers of personal data inside ciphertext they submit.

• Accessibility Statement

  Accessibility target, what is tested, known limits, and how to request an accessible alternative.