PRIVACY

Privacy

Last updated: September 18, 2026

What this product collects

EphemeralSecrets stores the data you give it: the secret text you paste, your email address (from sign-in), and metadata about each secret (creation time, expiry time, whether it was consumed). This data is stored in a Cloudflare D1 database.

How secrets are handled

A secret is stored in plaintext (not encrypted at rest in this version) and is destroyed permanently when the one-time link is opened, or after 24 hours. Once destroyed, the secret text cannot be recovered. The metadata row (timestamps, status) may persist in the database until the next scheduled cleanup.

Authentication data

Sign-in is handled by the fleet's shared authentication host at auth.agen2ic.ai. That service processes your email and password. EphemeralSecrets receives your email address and a user identifier after successful sign-in, and stores them to associate secrets with your account.

Cookies

A session cookie is set after sign-in and used solely to identify you on subsequent requests. It is HttpOnly, Secure, SameSite=Lax. No third-party cookies, no tracking, no analytics.

Data retention

Secrets are deleted on first read or after 24 hours, whichever comes first. Session tokens expire after 7 days. Your user record persists as long as you have an active session or existing secrets. You may delete your data by signing out and contacting the operator.

Third-party services

This product uses Cloudflare (Workers + D1) for hosting and database storage, Google Fonts for typeface rendering, and the fleet auth host for sign-in. No personal data is shared with advertising or analytics services.

Legal entity

EphemeralSecrets is operated by Agen2ic, LLC, a Colorado limited liability company. This policy is binding against this entity. No postal address, company number, VAT number, or phone number is published at this time; inquiries may be directed through the operator's established channels.

Contact

For privacy inquiries, email ephemeralsecrets@agen2ic.ai. Include "Privacy" in the subject line and the email address you used to sign in.