Privacy Policy

1. What we never see

Your secret's plaintext never reaches our server, in any form, from either the website or the extension. Encryption happens entirely in your browser (or the extension's own sandboxed context) using the Web Crypto API before any network request is made. The server only ever stores ciphertext and a masked half of the encryption key, both of which it deletes the moment the secret is viewed or expires.

2. What is processed, and why

• Ciphertext, IV, and masked key half: held in server memory only (never written to disk), for as long as the secret is unviewed and unexpired. Deleted immediately on first view, or automatically purged at your chosen expiry.
• Recipient email (optional): if you use the "lock to a recipient" feature, that address is used once to send a one-time verification code via our email provider, Resend. It is not kept beyond the secret's lifetime and is never added to a mailing list.
• Google account (optional, Pro sign-in): we store a one-way hash of your Google account ID plus the email address Google provides, solely to tie a Pro license to your account. We never receive or request your Google password.
• Payment details (optional, Pro): handled entirely by Lemon Squeezy. Blink's own server never receives your card number or billing details.
• IP address: used transiently for rate limiting (to stop abuse), not logged or stored.

3. The browser extension, specifically

The extension (popup, right-click menu, and floating selection button) is built to need as little access as possible:

• Text selection: it only reads the exact text you've selected, and only at the moment you click "Send via Blink." It never scans, logs, or transmits anything else on the page.
• Encryption: identical to the website: your selected text is encrypted locally before anything is sent to blink.malto.icu's API.
• Clipboard: after a link is created, the extension writes that link to your clipboard. It never reads your existing clipboard contents.
• Permissions it requests, and why: contextMenus (adds the right-click item), scripting + activeTab (copies the created link into the tab after a right-click action), notifications (confirms a link was created), and host access to blink.malto.icu (to call the API directly without needing page-level CORS).
• No analytics, no remote config, no third-party code is bundled in the extension.

4. Third parties we rely on

• Resend, for sending one-time email codes (only when you use that optional feature).
• Lemon Squeezy, for processing Pro subscription payments and license validation.
• Google, only if you choose to sign in for Pro.

None of these receive your secret's plaintext, and none are used for advertising or tracking.

5. Open source

Blink's full source, website and extension, is public on GitHub under AGPL-3.0, so this policy can be verified against the actual code rather than taken on trust.

6. Questions

Open an issue on GitHub and we'll answer there.