// changelog

Release history.

Every release, in plain words. New entries appear here the day a version ships.

Desktop 1.1 — macOS, Linux and Windows

August 2026

Adds an option to discourage copying. Turn it on and the viewer disables text selection and hides the copy button for that note, and tells the recipient you asked for it. It is a speed bump, not protection, a screenshot still works.

Also adds ScrubPony, VaultPony and PassPony to the pony family list in Settings, and a link to the whole family at pony.norsehor.se.

1.0 — Android release

August 2026 — Google Play & F-Droid

The same 1.0 feature set as the iPhone release below, now free on Google Play and F-Droid.

1.0 — initial release

July 2026 — iPhone

  • Client-side encryption with AES-256-GCM; keys derived with HKDF-SHA256 on the device.
  • Fragment-key links: the decryption key travels only in the link's #fragment, never to the server.
  • Optional passphrase second factor via PBKDF2-HMAC-SHA256 at 600,000 iterations.
  • View limits from 1 to 100 — ciphertext deleted in the same transaction as the last view.
  • Expiry from 1 hour to 30 days, enforced by a five-minute sweep.
  • Auto-hide countdown after reveal, carried encrypted inside the note.
  • Opt-in read receipts with the recipient told before revealing; generic push notifications.
  • Sent tab with live status and early burn via a per-note management token.
  • QR code handoff for in-person link delivery.
  • Self-contained browser viewer with a strict Content-Security-Policy — no app needed to read.
  • Custom relay server support in Settings; each note remembers its server.
  • Localized in 9 languages. No accounts, no analytics, no trackers.