BurnPony

Send a secret without making the other person install anything.

Write a note, set the self-destruct rules, share one link. The note is

encrypted on your device with AES-256-GCM before anything is uploaded, and

it decrypts only in the recipient's browser. The decryption key travels in

the part of the link after the #, which browsers never send to any server —

so the server stores ciphertext it cannot read, plus a note ID, a view

count, and an expiry. No accounts, no names, no analytics.

WHAT YOU CONTROL

• Views: burn after 1 reading, or allow up to 100

• Expiry: 5 minutes to 30 days, changeable later, counted from now

• Optional passphrase, stretched with PBKDF2 and mixed into the key —

send it through a different channel than the link

• Auto-hide: the revealed note re-hides after a timer

• Read receipts, disclosed to the recipient before they reveal the note —

BurnPony does not do silent read tracking

• A private label for your own list; it never leaves your device

• QR code for in-person handoff: the whole link, key included, transfers

with no network at all

HONEST LIMITS

Whoever has the full link (and passphrase, if set) can read the note. A

recipient can always copy or photograph a note while it is visible.

Self-destruction limits future access; it does not control the moment of

reading.

OPEN

The app, the server, the viewer, and the wire-format specification are