Effective date: 2025
Welcome to SendSecure — a privacy-first service for sending encrypted messages and files that automatically delete themselves after viewing or expiry.
When you create a secure message or attach a file, everything is encrypted directly inside your browser before it is sent to our servers. Your plaintext message, password, and original file content never leave your device.
The encrypted message and (if applicable) the encrypted file are uploaded and stored temporarily on our servers. Only the ciphertext, salt, and initialization vector (IV) are saved — never your password.
When the recipient opens your unique SendSecure link, they are prompted for the same password. Decryption happens entirely in their browser using the same cryptographic process. Once the message (and any attached file) has been decrypted successfully, both are permanently deleted from the server and cannot be recovered.
If a message is never accessed, it is automatically deleted after its expiry period (1–7 days, depending on what you selected).
SendSecure uses modern, industry-standard cryptography to keep your content secure:
You can optionally attach a file (up to 25 MB) to your message. The file is encrypted separately using its own AES-GCM key, salt, and IV — derived from the same password — ensuring total isolation and confidentiality. After the recipient downloads and decrypts the file, it is automatically deleted from the server.
SendSecure does not collect personal information, perform analytics, or use tracking cookies. The only data ever stored temporarily are the encrypted message and file blobs — never plaintext or passwords. These are destroyed immediately after viewing or automatically upon expiry.
One-time viewing ensures that sensitive data cannot be leaked, forwarded, or accidentally left accessible online. Once a recipient opens your message, the link becomes invalid forever — protecting both you and your recipient.
Questions or feedback? Contact me at [email protected].