Privacy policy
Last updated:
ReadThenBurn lets you share encrypted, view-once messages and files without an account. We do not use advertising or behavioral analytics.
Who is responsible
Florian Kaiser operates ReadThenBurn. For privacy questions or requests, email contact@readthenburn.com or visit the contact page.
Messages, files and encryption
Your browser encrypts messages and files before uploading them. We store encrypted content and the limited delivery information needed to run the service, such as identifiers, sizes and expiry times. Decryption keys stay in the part of your sharing link after # and are not sent to the service. Anyone with the complete link can open its content.
How long content stays
- Text messages: the stored encrypted message is deleted when it is successfully opened. Unread messages are scheduled for deletion after ten years.
- Attached files: access expires 24 hours after upload. The stored encrypted file description is deleted when opened. Unread descriptions are scheduled for deletion after two days. Encrypted file data is scheduled for deletion after 24 hours and may remain for roughly another 24 hours while storage cleanup finishes.
Automatic storage cleanup can take time. View-once delivery cannot erase copies saved by a recipient. We cannot recover lost keys or restore burned messages.
Connection data and service providers
We use Google Cloud and Cloudflare to host, deliver and protect the service. They process connection information such as IP addresses, browser information, requested URLs and timestamps. Decryption keys in URL fragments are not included. The application keeps limited abuse-prevention and file-access records. Google request and error logs are retained for 30 days.
These providers may process data outside your country, including outside the EEA. Their data processing terms describe applicable safeguards, including standard contractual clauses. See the Google Cloud terms and Cloudflare terms.
The application does not use advertising cookies or store messages and keys in local storage. Cloudflare may use necessary security cookies. If you contact us, we keep your correspondence as needed to handle your request or meet legal obligations. Do not send decryption keys or sensitive message contents by email.
Your privacy rights
Where the GDPR applies, we process data to provide the service you request, protect the service from abuse and meet legal obligations. The legal grounds are performance of the requested service, legitimate interests in security and availability, and legal obligations.
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. You may also complain to your data protection authority. Contact contact@readthenburn.com to exercise your rights or ask about data processing and safeguards. We may need enough information to identify the relevant record and verify your request.