BurnPony Self-Destruct Notes

Send a secret that reads once and burns. Encrypted on your phone before it leaves. No account, no tracking, and the entire app is open source.

Write a secret. Share one link. It reads once and burns.

BurnPony encrypts your note on your phone before anything is sent. The server stores only ciphertext it cannot read, the decryption key travels in a part of the link that browsers never transmit, and the recipient needs nothing but a browser. No app on their side, no account on yours.

WHAT IT DOES

One link, any recipient, any device with a browser. View limits from 1 to 100, expiry from 5 minutes to 30 days, an optional auto-hide timer after reveal. Optional passphrase as a second factor, shared through a different channel than the link. Read receipts, honestly: the recipient is told before they open. No silent tracking, ever. Labels that never leave your phone: name a note "wifi password for mom" and the read notification says so, while the server knows nothing. Sent Notes: live status, view counts, change the expiration after sending, burn early with a swipe. The recipient page speaks nine languages, following the reader's browser.

WHY YOU CAN CHECK INSTEAD OF TRUST

The entire system is open source: this app, the server, and the recipient page, with a written protocol specification and cross-implementation test vectors. The note page is byte-reproducible from its published source, so View Source is a real audit, not a gesture. You can even run your own server and point the app at it from Settings.

HONEST LIMITS

Self-destruction limits exposure; it cannot un-share. A recipient can always copy or photograph a revealed note, and BurnPony says so on the note page itself, because a privacy tool that overpromises is worse than none.

From NorseHorse, maker of PGPony, CarrierPony, AgePony, RelayPony, and QuorumPony.