PRIVACY
What this service knows about you, what it does not, and what it cannot protect you from.
1. Messages are encrypted in your browser
When you press ENCRYPT TRANSMISSION, your message — and any codename, mission or classification you entered — is encrypted locally in your browser with AES-256-GCM before anything is sent. The readable text never needs to leave your device.
2. The server stores only ciphertext
The server stores an encrypted blob together with technical fields: a random ID, the IV and salt used for encryption, creation and expiry times, the read limit and counter, and SHA-256 hashes of two access tokens. It does not store the plaintext, the decryption key or your passphrase.
3. The decryption key is not intentionally transmitted
The key lives after the # in the secure link (the URL fragment). Browsers do not send the fragment to the server. The page removes it from the address bar as soon as it has been read. If you paste the full link into another service (a chat app, e-mail, a link shortener, a search engine), that service may see the key — choose your channel accordingly, or use SPLIT TRANSMISSION or a passphrase.
4. Messages are deleted automatically
Every transmission has an expiry time (at most 7 days) and may be limited to one or three reads. Expired and fully-read transmissions are deleted from the server. The sender can destroy a transmission earlier with the destroy link.
5. Metadata may still be visible
Like any website, your IP address, the time of your visit and the size of the encrypted data may be visible to the hosting provider, network operators and anyone who can observe your connection. ENIGMA does not store raw IP addresses: rate limiting uses a keyed hash that is deleted after about two hours. Technical error logs contain no message content, keys or full links.
6. No tracking
No analytics, advertising pixels, fonts or scripts from third parties are loaded. There are no cookies. Your browser may remember UI preferences (spy mode, sound) in local storage — never keys or messages.
7. What ENIGMA cannot do
- It cannot prevent the recipient from taking screenshots, photographing the screen or copying the text.
- "Burn after reading" deletes the server copy. It cannot erase copies that were already made.
- It cannot protect a device that is already compromised (malware, a malicious browser extension, someone looking over your shoulder).
- It cannot hide that you communicated with this service.
8. Contact
This service is operated by the owner of this domain. Because the operator cannot read transmissions, it cannot recover, reveal or hand over their content.