SecretNote policies

Privacy and security

SecretNote is designed so that SmartKit can never read your secret.

• Your secret is encrypted in your browser using AES-GCM with a 256-bit key before anything is sent to our server.
• The decryption key is placed in the link fragment. Browsers do not send that fragment to the server, so SmartKit never receives or stores the key.
• The server stores only encrypted ciphertext and safe metadata such as expiry time and view count.
• Access is limited by the views and time window you choose. The encrypted copy is removed after its final allowed view or expiry.
• The encrypted content is fetched only when the recipient intentionally selects Reveal, so automated link previews cannot consume a one-time secret.
• You can destroy an active secret from its management link or your account dashboard.

Honest limits

• After revealing a secret, a recipient can still photograph, copy, or record what appears on their screen.
• Deleting a secret removes its stored file through the operating system; it does not promise physical disk overwriting.
• Anyone with the complete link can attempt to open the secret. Share links carefully and send passwords through a separate channel.
• SecretNote reduces exposure but no online service can guarantee zero risk.

Passwords and PINs

When you add a password or PIN, your browser derives a verifier using PBKDF2 and sends only that verifier. The server stores a hash of the verifier and never sees the plain password. A passphrase is stronger than a short PIN.

Acceptable use

Because SecretNote content is encrypted in your browser, SmartKit cannot inspect secret contents. You must not use SecretNote to:

• Deliver malware, ransomware, or other harmful software.
• Conduct phishing or attempt to steal credentials or identities.
• Share illegal content or facilitate illegal activity.
• Harass, threaten, or abuse another person.
• Send unauthorized bulk or spam messages.
• Share credentials you are not authorized to share.

Reporting and enforcement

Recipients can report abusive links from the recipient page. SmartKit cannot read the encrypted secret, but may disable a reported link, apply rate limits, challenge suspicious activity, or take account action in response to serious or repeated abuse.