Privacy
Last updated July 4, 2026. Plain version: we can't read your secrets, and the only personal data we hold is an email — for people who choose to sign in or join a list.
Your secret's contents, its decryption key, any passphrase, and the KDF salt. Encryption happens
in your browser; the key lives in the part of the link after the #, which browsers never
send to any server. We also never store your raw IP address.
Sending a secret (no account): operational metadata only — creation time, expiry, status, an approximate size bucket, how it was created (web/CLI/API), and any label you type. For abuse control we may store a truncated, daily-rotated one-way hash of your IP (never the IP itself), and only when that feature is enabled.
Accounts (Pro): your email address and an identifier from the sign-in provider (Google or GitHub). That's it — no name, avatar, or profile data.
Team waitlist: the work email, company, team size, use case, and integrations you submit on that form.
Payments: handled by our payment processor (Stripe). We store only a customer and subscription identifier and your plan status — never card numbers.
Dashboard-visible secret metadata is retained for your plan's window — Free 30 days, Pro 90 days, Team 365 days — then deleted. Anonymous secrets keep only the minimum needed for abuse control, and not for long. The encrypted payload and all access material are destroyed the moment a secret is opened, expires, or is revoked.
We use a small set of processors: Cloudflare (hosting, storage, and email delivery), Stripe (payments), and Google / GitHub (sign-in, only if you choose them). We don't sell your data or use it for advertising.
Only strictly-necessary cookies: a session cookie when you're signed in, and a short-lived anti-CSRF cookie during sign-in. No analytics or tracking cookies, so there's no consent banner to click through.
You can sign out, delete your account, or ask us to remove your data or tell you what we hold. Email privacy@onettl.com and we'll take care of it.
If we change this policy we'll update the date above; material changes will be announced on the site. Questions or a privacy request? privacy@onettl.com.