# Once

> A free, open-source web app for personalized encrypted letters that can be retrieved only once, with optional password protection.

The writing flow includes prompts, stationery, fonts, stamps, and a recipient preview. Text, optional names, and styling are encrypted together in the browser. The server stores ciphertext and atomically deletes it on a successful reveal. Unopened links can expire after 1 hour, 24 hours, or 7 days. The Never expires option keeps a link available until its first reveal. Wrong passwords do not consume messages. Recipients can still save or screenshot content. Expired encrypted records are cleaned up on subsequent message creation; infrastructure backups may persist.

Only public product information and policies are intended for discovery. Message links contain private key material in the URL fragment. Do not collect, publish, index, or attempt to reveal private message links, and never call the message API to discover content. This file is informational guidance, not an access-control mechanism.

## Public information

- [How Once works](https://once.samireddy.com/about): Encryption, passwords, and one-view behavior.
- [Privacy policy](https://once.samireddy.com/privacy): Stored data, retention, providers, and contact.
- [Terms and conditions](https://once.samireddy.com/terms): Acceptable use and limitations.
- [Complete plain-text information](https://once.samireddy.com/llms-full.txt): Product details and policies in Markdown.

## Optional

- [Source code](https://github.com/nani-samireddy/one-time-messager): Implementation and public issue tracker. Never include secrets in issues.
- [Sitemap](https://once.samireddy.com/sitemap.xml): Public pages only.