onetime
CS EN

PRIVACY

How it works and what we store

In short: we hold the content encrypted only until the first read or until it expires. We do not have the key to it.

What we DON'T store

  • The content in readable form
  • The decryption key — it only lives in the link
  • The recipient's IP address
  • Analytics or trackers

What we do store

  • Encrypted data until it is read or expires
  • The time of creation and of reading
  • Your language choice, in a cookie
  • Operational logs for 7 days
Technical details

Content is encrypted with AES-256-GCM. Each link gets a random key, from which HKDF derives separate keys for the payload and for the metadata.

The key appears only in the link fragment, after the #. Per the HTTP specification a browser never sends the fragment to a server — so it reaches neither our logs nor any proxy along the way.

An extra password is stretched with Argon2id. After five wrong attempts we destroy the content.

All traffic runs over TLS. Deleting means deleting the record and the encrypted file, not just flipping a flag in a database.

Operator

The service is operated by Fortion Networks, s.r.o., registered in the Czech Republic.

Smetanovy sady 8, 301 00 Plzeň, Czech Republic

Company ID: 26397994 · VAT ID: CZ26397994

Last updated: 27 Aug 2026