readonce.io — built to forget

Privacy

Last updated 24 October 2026.

readonce.io is a one-time note service. We keep as little as we can, we do not sell data, and we do not use what you send us for advertising or profiling.

What we store

  • The note itself, encrypted, until someone reads it once or the timer runs out. Then it is deleted.
  • An optional description on the envelope, in plaintext, so the warning page can show it before a read. Anyone with the link can see it.
  • If you set a password, a digest of that password (not the password, and not the encryption key).
  • If you sign in, a week-long session cookie with your email address. We do not keep an account database.
  • If you ask to be emailed when a note is read, the encrypted note records that you elected to be notified and which signed-in address to notify.
  • Short-lived IP counters for rate limits. They expire with the window (hours, not months).

What we do with it

We use the encrypted note to show it once to whoever has the link (and the password, if you set one). We use your email only to keep you signed in and, if you elect to be notified, to send a read notification that may include the description — never the note, the password, or the share URL. We use IPs only to slow abuse.

We do not sell, rent, or share this for marketing. We do not run ads or analytics scripts.

What we do not log

We do not log note contents, passwords, password verifiers, or encryption keys. See Security for how encryption and once-only reads work.

Who else sees something

The app runs on Vercel. Encrypted notes are stored with Upstash. Sign-in goes through Google or GitHub (email scope only). Optional read mail is sent by Resend. Those providers see what they need to run their service — TLS to Vercel, ciphertext at rest, an OAuth email, or a notification if you asked for one. We do not send them the decrypted note except in that notification’s metadata (description only).

Cookies

We set a session cookie only if you sign in. If you never sign in, there is no session cookie. That cookie is HttpOnly, SameSite=Lax, and Secure. A short-lived cookie holds OAuth state while you complete sign-in, then goes away. We do not use tracking cookies.

How long

Notes last until first successful read, or up to the expiry you chose. The default and the maximum are one month. Sessions last one week. Rate-limit keys last for their window. There is no archive and no way for us to list your notes after they are gone.

Your choices

Do not sign in if you do not want a session email on this device. Do not elect to be notified if you do not want a message when the note is opened. Opening the share link (or waiting out the timer) deletes the note. Signing out clears the session cookie.