The short version: Secrets are encrypted in your browser, viewed once, and then deleted. We do not run tracking scripts.
Privacy
Secure Share encrypts your secret in your browser before it is uploaded. The decryption key stays in your browser and in the link fragment (the part after #), which is not sent to our server.
We do not use cookies for analytics, advertising trackers, or third-party telemetry scripts.
Like most websites, basic infrastructure logs may include limited connection details (such as IP address, timestamp, and request path) for reliability and abuse prevention. We do not use these logs to track you across sites or for advertising profiles.
Bot Protection
We use Cloudflare Turnstile to prevent automated abuse of the service. Turnstile runs an invisible challenge in your browser to verify you are human, without traditional CAPTCHAs in most cases.
Turnstile collects browser signals (such as interaction patterns) to distinguish humans from bots. It does not use cookies for advertising or track you across websites. For details, see Cloudflare's Privacy Policy.
Data Handling
The server stores encrypted secret payloads only, with an expiry time and metadata needed to enforce one-time retrieval and expiration rules.
When a secret is successfully retrieved, it is deleted. Expired secrets are also removed by cleanup routines.
No Warranty
This tool is provided "as is" without warranties of any kind. You are responsible for how you share links and passwords.
Limitation of Liability
To the maximum extent allowed by law, we are not liable for losses or damages resulting from use of this tool.
Changes
We may update this page when functionality or legal requirements change.
Contact
Questions? Reach us at nodeblue.com.