Privacy policy

Last updated October 12, 2026.

secretmessage.me lets you collect anonymous messages from friends and send self-destructing notes. This page explains, in plain words, what we keep and why.

If you send a message

You don't need an account. We store the text of your message and when it was sent. We do not store your IP address, device, location or name with the message.

Your browser keeps a random code so that the person you message can block you. On our server that code is scrambled differently for every link, so it can't be used to work out who you are or to connect your messages to different people.

If you make a link

We store the name you type, your link, your question, and the messages you receive. A quick link is tied to a sign-in token saved in your browser. If you save your board with Google, we also store the email address and account ID that Google shares with us, only so you can log in again.

Secret notes

Notes are encrypted on your device before they're uploaded. The key is in the part of the link after the # sign, which browsers don't send to servers, so we can't read your notes. Each note is deleted as soon as it's opened, or when its timer runs out.

Reports and safety

When you report a message, we keep a copy of its text so we can review it, and remove it from your inbox. Messages that look like threats, slurs or self-harm insults are flagged automatically and hidden until you choose to read them.

Service providers

Our database and sign-in run on Supabase, and the website runs on Cloudflare. Like any website, their networks briefly process IP addresses to deliver pages and stop abuse, but we don't attach them to your messages. Google handles sign-in if you choose to use it.

Cookies and storage

We use your browser's storage to keep you signed in and to hold the random sender code described above. We don't use tracking cookies. If we add advertising later, we'll update this page first.

Deleting your data

Delete any message from your inbox at any time. Deleting your account from Settings removes your link and every message in it right away. Unopened secret notes delete themselves when their timer ends.

Age

You must be at least 13 to use secretmessage.me.

Contact

Questions or requests: support@secretmessage.me.