Private until you share.
No automatic opening, publication or scoring. No routine owner viewer. Only you choose whether to reveal by sharing your private recovery file or link, which grants full access.
↳
A private counter.
Checking admission…
An invitation allows deposits only. It cannot open anyone’s envelope. Recovery below does not require an invitation.
01 Bring the originals02 Check the envelope03 Keep your private key
Ciphertext, not your key.
Your browser encrypts originals and annotations. The server receives encrypted bytes, an opaque ID and a read capability—not your decryption key. Request date, size and path are not anonymous.
Safekeeping, not magic.
Not independently audited or externally witnessed. An operator who changes this web client could capture secrets. Registration proves server receipt, not authorship, screenshot authenticity or its original date.
Nothing deposited. Drafts live only in this tab.
YOUR FINAL CHECK / NOT YET REGISTERED
No surprises in the envelope.
Need to change something? Edit above or choose “Back to edit.” Any change invalidates this review.
SEALED REQUEST / DO NOT START AGAIN
Keep this envelope in hand.
Do not close this tab until a verified receipt arrives. If a response is lost, registration may already exist. Retry sends the exact same ID, key, capability and encrypted bytes—never a new deposit.
A pending capsule is NOT a receipt. It contains private key material and exact encrypted bytes. Restore it below, then use an invitation if admission has expired. No automatic retry occurs.
REGISTERED / PRIVATE RECOVERY REQUIRED
Your original is in safekeeping.
Save the private recovery file somewhere safe. It contains the encryption key and read capability. Anyone holding it or its link can read the full envelope. Prefer the recovery file. Keep it out of public chats, link previews and shared folders. Private links may remain in browser history, sync, extensions or clipboard history despite fragment removal. Anyone with a copy can read and re-share every scenario and annotation; access cannot be revoked.
↩
Open your own envelope.
No invitation needed. Choose a private recovery file, or restore an uncertain request from its pending capsule. Files cannot redirect you to a different service.
Nothing opened. Recovery secrets stay in this tab.
DECRYPTED HERE / AUTHORSHIP NOT VERIFIED