Secretlink.life

Privacy Policy

Last updated: June 13, 2026

1. Introduction

Secretlink.life ("we", "us", "the Platform") is an end-to-end encrypted, ephemeral messaging and secret-sharing platform. This Privacy Policy explains what data we collect, how we use it, and your rights as a user.

2. Age Restriction

You must be at least 18 years old to use Secretlink.life.

By accessing or using this Platform, you confirm that you are at least 18 years of age. If you are under 18, you are strictly prohibited from using this service. We do not knowingly collect or process data from anyone under 18. If we become aware that a user is under 18, we will terminate their account and delete all associated data immediately.

Parents and guardians are responsible for monitoring their children's internet usage. We encourage use of parental control tools to restrict access to age-inappropriate platforms.

3. Data We Collect

We collect minimal data by design:

  • Account data: Email address (for magic link authentication), chosen handle/username
  • Encrypted content: Messages and files are encrypted on your device before reaching our servers. We cannot read, access, or decrypt your content.
  • Metadata: Timestamps, approximate geolocation (for map secrets, if you choose to drop one), message expiry timers
  • Cryptographic keys: Public keys are stored on our server. Private keys never leave your device.
  • Technical data: IP address (for rate limiting and abuse prevention only, not stored long-term), browser type, device type

4. What We Do NOT Collect

  • We do not read or store plaintext message content
  • We do not use tracking cookies or third-party analytics
  • We do not sell, rent, or share your data with advertisers
  • We do not build behavioral profiles or run targeted advertising
  • We do not store messages after they have been viewed and expired

5. End-to-End Encryption

All direct messages are encrypted using X25519 ECDH key exchange and AES-GCM encryption. Encryption and decryption happen entirely on your device. Our servers relay ciphertext only — we have zero ability to read your messages.

Anonymous secrets (one-time links) are encrypted with XChaCha20-Poly1305 on your device. The decryption key is embedded in the URL fragment, which is never sent to our servers.

6. Data Retention & Self-Destruction

  • Secrets with one-time links are permanently deleted after being viewed (or after their TTL expires, whichever comes first)
  • Map secrets expire and are automatically deleted after their configured timer
  • Direct messages expire based on the TTL set by the sender
  • We routinely purge expired encrypted blobs from our storage
  • Account deletion removes all associated data permanently

7. User-Generated Content & Responsibility

Secretlink.life is a neutral transmission platform. Because all content is end-to-end encrypted, we cannot monitor, moderate, filter, or screen user-generated content before or during transmission.

Users are solely and entirely responsible for the content they create, send, share, or distribute through this Platform. This includes but is not limited to:

  • Text messages, images, videos, and files of any nature
  • Content that may be sexually explicit, adult-oriented, or otherwise intended for mature audiences
  • Content shared via direct messages, secret links, or map drops

By using this Platform, you acknowledge and agree that:

  • You are at least 18 years old
  • You bear full legal responsibility for any content you send or share
  • You will not use the Platform to distribute illegal content including, but not limited to: child sexual abuse material (CSAM), non-consensual intimate imagery, content that violates any applicable law
  • You consent to receiving content from other users that may be explicit or adult in nature
  • Secretlink.life bears no responsibility for content transmitted between users
  • You will not send unsolicited explicit content to individuals who have not consented to receive it

8. Prohibited Content

While we cannot proactively monitor encrypted content, the following is strictly prohibited and may result in account termination and referral to law enforcement:

  • Child sexual abuse material (CSAM) or any exploitation of minors
  • Non-consensual intimate or sexual imagery ("revenge porn")
  • Content that facilitates terrorism, violence, or human trafficking
  • Distribution of malware or tools designed for unauthorized access
  • Content that violates applicable local, national, or international laws

We cooperate with law enforcement agencies when required by valid legal process. Users can report content or accounts via our reporting mechanism.

9. Limitation of Liability

To the fullest extent permitted by law, Secretlink.life, its operators, developers, and affiliates shall not be held liable for:

  • Any content created, sent, or received by users through the Platform
  • Any emotional, psychological, or material damage resulting from content received via the Platform
  • Any illegal use of the Platform by its users
  • The actions or conduct of any user on or off the Platform
  • Any data loss resulting from the ephemeral nature of the service (secrets are designed to disappear)

The Platform is provided "as is" without warranties of any kind.

10. Cookies & Local Storage

We use a single authentication cookie (sl_token) to maintain your login session. We use IndexedDB (browser local storage) to store your cryptographic private keys — these never leave your device. We do not use third-party cookies, tracking pixels, or advertising identifiers.

11. Third-Party Services

  • AWS SES: Used to send transactional emails (magic link login). Your email address is processed by Amazon Web Services for delivery purposes only.
  • Hosting: Our servers are hosted on AWS EC2 (EU region). Encrypted data at rest resides within the EU.

12. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you (limited to email and handle)
  • Deletion: Request complete deletion of your account and all associated data
  • Portability: Due to the ephemeral, encrypted nature of our service, data portability is inherently limited
  • Withdraw consent: You may stop using the service and delete your account at any time

To exercise these rights, reach out via our contact form.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via the Platform. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact

For privacy-related inquiries, use our contact form.