A letter you open
Three steps. And four things worth knowing first.
The three steps
Write the letter
Four lines, no more: a small line above, the news itself, a line of your own, and who it is from. No account, no password.
Send the envelope
You get a link that shows the sealed envelope. It gives nothing away — not even in the preview WhatsApp or iMessage puts underneath it.
Whoever opens it pulls off the wax sticker and reads the letter. Each person in their own time; nobody has to be free at the same minute.
Get the reaction back
After opening, anyone can send a photo back — one picture, no second try. You see the faces at the moment they found out.
The photos arrive on your own page, which only you can open.
Worth knowing
Two links, and one of them cannot be replaced
One you send out, the other you keep. Only the second opens the photos later.
Lose it and they are unreadable for good — for us as well. That is not an oversight; it is the condition for us not being able to see them. Save it as soon as you get it.
We cannot look at the photos
Every photo is encrypted on the sender’s device before it goes up. What we hold is ciphertext, and the key never reaches our server.
The picture is redrawn as it is taken. All metadata is dropped in the process, in particular the location.
After 90 days everything is gone
The photos are deleted automatically, from the database and from file storage. Anyone who sent one can also withdraw it themselves at any time.
What does not work yet
There is one occasion — gender reveal — and one style, the envelope. Engagement, wedding and further styles are planned but not built.
In some in-app browsers, WhatsApp among them, the camera stays shut. The envelope works there; the photo needs Safari or Chrome.