BurnPony Self-Destruct Notes

Write a secret. Share one link. It reads once and burns.

BurnPony encrypts your note on your phone before anything is sent. The
server stores only ciphertext it cannot read, the decryption key travels
in a part of the link that browsers never transmit, and the recipient
needs nothing but a browser. No app on their side, no account on yours.

WHAT IT DOES


One link, any recipient, any device with a browser.
View limits from 1 to 100, expiry from 5 minutes to 30 days, an optional
auto-hide timer after reveal.
Optional passphrase as a second factor, shared through a different
channel than the link.
Read receipts, honestly: the recipient is told before they open. No
silent tracking, ever.
Labels that never leave your phone: name a note "wifi password for mom"
and the read notification says so, while the server knows nothing.
Sent Notes: live status, view counts, change the expiration after
sending, burn early with a swipe.
The recipient page speaks nine languages, following the reader's
browser.


WHY YOU CAN CHECK INSTEAD OF TRUST

The entire system is open source: this app, the server, and the recipient
page, with a written protocol specification and cross-implementation test
vectors. The note page is byte-reproducible from its published source, so
View Source is a real audit, not a gesture. You can even run your own
server and point the app at it from Settings.

HONEST LIMITS

Self-destruction limits exposure; it cannot un-share. A recipient can
always copy or photograph a revealed note, and BurnPony says so on the
note page itself, because a privacy tool that overpromises is worse than
none.

From NorseHorse, maker of PGPony, CarrierPony, AgePony, RelayPony, and
QuorumPony.