Skip to content
Alexandru JungeanOne Time SecretOther tools

One Time Secret - Tool - by Alexandru Jungean

Illegal Content Notices

Română

How to notify alleged illegal hosted ciphertext under the Digital Services Act, and what we can actually do.

Version 1.1.0 · Effective 22 August 2026

One Time Secret - Tool - by Alexandru Jungean at https://secret.alexjungean.com is a hosting service for user-generated ciphertext of at most 8192 bytes of plaintext, living at most 7 days or until one Reveal. This page is the Article 16 Digital Services Act notice mechanism. The Romanian text is at Sesizări privind conținutul ilegal.

The Operator cannot decrypt envelopes and is not required to monitor them. A usable notice must identify a public identifier that still exists. A notice that only says “someone stored something illegal” cannot be acted on.

1. How to send a notice

Send email using this pre-filled message: Open a DSA notice to alex.jungean@gmail.com.%20Do%20not%20send%20the%20fragment%2C%20proof%2C%20or%20AES%20key%3A%0A%0A2.%20Explanation%20of%20the%20illegal%20nature%2C%20including%20the%20legal%20provision%20if%20you%20know%20it%3A%0A%0A3.%20Why%20this%20identifier%20points%20to%20the%20information%20(how%20you%20obtained%20it%2C%20without%20pasting%20secrets)%3A%0A%0A4.%20Your%20name%20and%20email%3A%0A%0A5.%20I%20state%20in%20good%20faith%20that%20the%20information%20I%20provide%20is%20accurate%20and%20complete.%0A%0A6.%20I%20state%20that%20I%20believe%20the%20information%20notified%20is%20illegal.). Or write the same six points in your own words to alex.jungean@gmail.com with subject “DSA notice — One Time Secret”. Do not attach capability links, proofs, AES keys, or plaintext.

There is no in-browser form that posts to a server. A mailto link does not send mail until you choose to send it from your own mail client. Content-Security-Policy on this site does not allow a form to post to a third-party action.

2. What a complete notice contains (Article 16)

  1. A sufficiently substantiated explanation of why the information is illegal (the legal provision if you know it).
  2. A clear indication of the exact electronic location — for this Service, the public identifier in the reveal path (22 characters). Not the fragment.
  3. Your name and email, unless the notice concerns an offence referred to in Articles 3 to 7 of Directive 2011/93/EU (child sexual abuse and exploitation), in which case identity may be omitted as permitted.
  4. A statement that you believe in good faith that the information and allegations are accurate and complete.
  5. A statement that you believe the information notified is illegal.

3. What we do after a notice

  • We acknowledge receipt when an email address is present.
  • If the public identifier is valid-shaped and a row still exists, we can delete that row. Deletion is the only content action we can take. We cannot redact or decrypt.
  • If the row is already consumed, expired, or purged, we will say so in generic terms. We cannot show you what it contained.
  • We decide based on the notice and on law, not on a keyword search of ciphertext.
  • We inform you of our decision. We do not generally have a way to inform the anonymous author.
  • Repeated knowingly false notices may be refused.

A statement of reasons, where we take an action that affects a recipient of the Service and we have a contact, will say whether the action is based on law or on the Acceptable Use Policy, and whether automated means were used (they are not used to classify content; rate limits are not content classification).

4. What we cannot do

  • Decrypt or confirm plaintext.
  • Identify an author or recipient from the secret table.
  • Restore a deleted envelope.
  • Keep a copy after Reveal or after the purge job.
  • Accept a notice that contains only a screenshot of plaintext with no public identifier.

5. Imminent harm and crime

If there is an immediate threat to life or a child, contact local emergency services first. You may still send us a public identifier so we can delete a live row. We may forward a credible notice of serious crime to competent authorities.

6. Redress

If you are the person who created a link and you can prove control of a still-existing public identifier without sending us fragment values, you may ask us to delete that row. After Reveal or expiry we cannot help. Complaints about this mechanism can also go to the Digital Services Coordinator identified in the Legal Notice.

All legal documents