Private by design · No account required

Share once.Gone from reach.

Send an encrypted note that becomes unavailable from CHOPPNOTE after it is revealed.

  • Encrypted in your browser
  • Key stays in the link fragment
  • Plain text only
ONE-TIME NOTEAES–256–GCM
A
Sender browserPlaintext encrypted locally
LOCAL
NO PLAINTEXT OR KEY
B
Ephemeral storeExpires or is consumed once
TTL
ATOMIC CONSUME
C
Recipient browserDecrypted locally after reveal
LOCAL

The decryption key lives after the # and is not sent in normal HTTP requests.

The private path

Four small steps. One deliberate reveal.

The service is designed around data minimization: the backend needs encrypted payloads, not message contents.

  1. 01

    Write

    Compose a plain-text note directly in your browser.

  2. 02

    Encrypt

    A fresh key encrypts the note locally before it leaves your device.

  3. 03

    Share

    Send one link. Its private fragment carries the key browser-to-browser.

  4. 04

    Reveal

    The encrypted payload is consumed once, then decrypted on the recipient’s device.

Security without theatre

The server should not need your secret.

CHOPPNOTE encrypts the note before transmission, while the decryption key remains browser-side in the URL fragment.

What the # protects

Browsers omit URL fragments from standard HTTP requests. The public token may reach the server; the key must not.

Honest limit: no web service can prevent screenshots, copying, malware, browser extensions, or a recipient photographing their screen.

Questions, answered plainly

Privacy deserves precise language.

Can CHOPPNOTE read my note?

The implemented data path keeps note plaintext and the decryption key out of the backend. The browser encrypts before upload and decrypts after retrieval. The live datastore passed TTL and atomic consume tests; provider persistence and logging limits remain documented residual risks.

What happens after reveal?

The server-side encrypted payload is designed to become unavailable immediately after one deliberate reveal. CHOPPNOTE cannot prevent the recipient from copying, photographing, or capturing what is shown on their own device.

Do I need an account?

No. The anonymous note flow intentionally avoids accounts, profiles, and unnecessary personal data.

Is an unread note stored forever?

No. Every note has a server-enforced expiration time. The first release supports 10 minutes, 1 hour, 24 hours, and 7 days.

A quieter way to share

Write it. Encrypt it. Share it once.

Create a private note