Sealed on your device. Unreadable everywhere else.
- Sealed end-to-end
- Keys are generated on your device and never leave it. Every message is sealed to the recipient’s registered key before anything touches the network — there is no server-side plaintext, because there is no plaintext anywhere but the two ends.
- Padded to a fixed size
- Every envelope is padded to a fixed size before it ships, so a three-word reply and a three-paragraph confession look identical from the outside. Length is metadata too.
- No address on the envelope
- Recipients find their mail by scanning view tags — a cryptographic “possibly for me” — so no recipient address ever appears on chain. The chain sees sealed envelopes arriving; it never sees for whom.
- The relay holds only ciphertext
- It batches sealed envelopes on chain, pays the gas, and keeps your address off the record. It cannot read a message and it cannot forge your signature. The most it could ever do is refuse to post.
- Which is why the exit exists
- Self-posting on chain is permissionless, costs about a cent, and works forever. If every relay on earth refused you — including ours — your messages still go through. Even we cannot silence you.