Terms of Use

1. The service

mysecret.now lets you encrypt text in your browser and store the resulting ciphertext on our server behind a one-time, expiring link. The decryption passphrase is generated and used exclusively in your browser and is never transmitted to or stored by the server. We store only the ciphertext, an initialization vector (IV), a non-secret Argon2id salt, and an expiry timestamp.

2. Acceptable use

• You may use mysecret.now to share sensitive but lawful information with parties you trust.
• You may not use the service to store, transmit, or distribute content that is illegal in your jurisdiction or the server’s jurisdiction, including but not limited to content that infringes intellectual property, violates privacy laws, or facilitates harm.
• You may not attempt to abuse, overload, reverse-engineer, or disrupt the service. Proof-of-Work and rate-limiting are enforced to protect the shared infrastructure.
• You are responsible for delivering the link and passphrase over separate channels. We are not liable if you send both halves through the same compromised channel.

3. No warranty

The service is provided “as is” and “as available”, without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the service will be uninterrupted, error-free, or secure in all circumstances.

4. Limitation of liability

To the maximum extent permitted by law, WebF1, LLC shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, arising out of or in connection with your use of, or inability to use, the service. Because the service is provided at no cost, our aggregate liability for any claim shall not exceed the amount you paid for the service (i.e. zero).

5. Data retention

Secrets are deleted the first time they are read, or at the latest 15 minutes after their expiry. We do not maintain backups of secret payloads, and there is no soft-delete or archive. We do not require accounts and do not collect personal data. See our Privacy Policy for details.

6. Self-hosting

mysecret.now is open to self-hosting. If you operate your own instance, these terms apply only to the service operated by WebF1, LLC at mysecret.now. As a self-hoster you are responsible for your own instance, its data, and its legal compliance.

7. Changes to these terms

We may update these terms from time to time. Material changes will be reflected by the “Last updated” date below. Continued use of the service after a change constitutes acceptance of the revised terms.