Effective 7 August 2026
Privacy, without the theatre.
Secret Served is designed to know as little as practical. This policy explains what the service processes, what it keeps, and where other providers are involved.
Secret content
Secret content is encrypted in your browser before upload. The service stores ciphertext, an initialization vector, encryption mode, reveal duration, and expiry time. Passphrase mode also stores a derivation salt. We do not receive your passphrase or any URL fragment.
Link and passphrase sharing
A passphrase is optional. Without one, the full link contains a random encryption key in its fragment, which browsers do not send to our service. With one, the passphrase is never included in the link and must be shared separately. The service does not store, transmit, or recover passphrases.
Retention and deletion
Encrypted secrets are retained until the first deliberate reveal or the selected unopened expiry, whichever occurs first. A reveal atomically retrieves and deletes the stored ciphertext. Expired data is removed automatically by the storage provider.
Aggregate counters
We retain only aggregate totals for successfully generated links and revealed messages. These counters contain no secret identifiers, IP addresses, browser fingerprints, or user-level history.
No behavioural analytics
The site does not use analytics scripts, advertising pixels, tracking cookies, or fingerprinting. Cloudflare and Upstash may process technical request metadata to deliver, protect, and operate their infrastructure under their own privacy terms.
Feedback and support
Choosing Feedback opens your email provider. Choosing Support this project may open a Stripe-hosted payment page. Information submitted there is handled by the provider and is not connected to secret activity.
Security limits
No service can erase information already copied by a recipient or protect a secret on a compromised device. Link-only secrets can be opened by anyone with the full link. Sending a link and passphrase through the same compromised account does not provide meaningful channel separation. The promise here concerns deletion of the hosted encrypted copy, not control over information after a recipient obtains it.
Contact
Privacy questions can be sent to privacy@secretserved.com.