Release history.

1.0 — in preparation for the App Store

July 2026

• Client-side encryption with AES-256-GCM; keys derived with HKDF-SHA256 on the device.
• Fragment-key links: the decryption key travels only in the link's #fragment, never to the server.
• Optional passphrase second factor via PBKDF2-HMAC-SHA256 at 600,000 iterations.
• View limits from 1 to 100 — ciphertext deleted in the same transaction as the last view.
• Expiry from 1 hour to 30 days, enforced by a five-minute sweep.
• Auto-hide countdown after reveal, carried encrypted inside the note.
• Opt-in read receipts with the recipient told before revealing; generic push notifications.
• Sent tab with live status and early burn via a per-note management token.
• QR code handoff for in-person link delivery.
• Self-contained browser viewer with a strict Content-Security-Policy — no app needed to read.
• Custom relay server support in Settings; each note remembers its server.
• Localized in 9 languages. No accounts, no analytics, no trackers.