Share Credit Card Details Securely

We use industry-standard, security-proven tech and best practices end-to-end. Data is protected with modern ciphers (e.g., AES-256-GCM) and battle-tested libraries.

Every request uses TLS. Encrypting in transit preserves confidentiality and integrity between your browser and our servers.

We enforce modern web security controls, Content Security Policy, HSTS, and secure cookies, plus layered defenses to mitigate both known and emerging threats.

Secrets are encrypted before leaving your browser and stored as ciphertext. The decryption key lives in the URL fragment.

Two random 18-char key parts are generated in the browser. The secret is encrypted client-side; only the partial key and ciphertext reach our backend, both the link and DB record are required to decrypt.

Pages that handle secrets load zero third-party scripts, reducing supply-chain risk and blocking script injection vectors.

We minimize collection and never log sensitive fields. The public key part lives in the URL fragment, which browsers don’t send to servers, so we can’t see or store it.

Each secret can be fetched exactly once. After first access, the encrypted payload and private key part are deleted, making reaccess impossible. (paid plans can allow limited re-views within a time window)