Burner notes: send it once, then it is gone

Some things should be read and not kept. A burner note is a self-destructing note you share as a link: it is encrypted on your device, it can be limited to a single view, it can be given an expiry time, and once it is used there is nothing left on the server to find.

The problem with sending anything sensitive

The usual channels keep everything. A password pasted into a chat is still there when the account is compromised three years later. An API key in an email sits in two inboxes, a backup, and a search index. The information stopped being useful the moment it was received, and it will outlive you anyway.

Disappearing-message features in chat apps address this by deleting the copy — from their server, on their terms, while their platform still processes the content. A burner note takes the opposite approach: the content is never readable by the service in the first place, and the useful lifetime of the link is set by the sender.

How a burner note works

  1. 1. Write it, then press Share. The note you are working on becomes a burner note — choose how many times it may be opened (default: once) and how long it lives (default: 24 hours).
  2. 2. It is encrypted with a fresh key. A unique 256-bit key is generated for this note alone and the content is sealed with XChaCha20-Poly1305.
  3. 3. The key goes in the link, not the database. The link looks like /burn/#id.key — the id and the key both sit in the URL fragment, which browsers strip before any request. The server never sees the key, so it never sees the note.
  4. 4. The server holds ciphertext and a policy. Views remaining, expiry time, and an owner for revocation. Nothing it can read.
  5. 5. The recipient decrypts locally. Their browser takes the key out of the fragment, decrypts the note, and renders it — one view is consumed when they open it.
  6. 6. Then it stops existing. When the views or the time run out, the note is unreachable for everyone, including you.

Why the link is built this way

If the key travelled in the URL path or a query string, it would land in server logs, in a proxy, in an analytics tool, and in the browser history of anyone who clicked. Putting it after the # is a deliberate use of a browser rule that has existed for thirty years: fragments are read by the page and never sent over the network.

The trade-off is honest and worth stating: the link is the secret. Anyone who holds it can open the note until the view budget is spent, which is why the practical rule is to send the link through a channel you would trust with a one-time password.

What people use them for

Sending a password or an API key

The credential that should not sit in a chat history for the next five years.

One-time handoffs

A door code, a Wi-Fi password, a recovery code, a bank detail — anything whose value expires the moment it is used.

Passing a draft to one person

An unreleased plan, a piece of writing, a price, a set of notes that are not for a mailing list.

Talking to a journalist or a researcher

The first exchange is often the most sensitive, and it does not need to live in an inbox afterwards.

What burner notes do not do

The reader can still copy it

A screenshot, a photograph of the screen, a paste into another document — burner notes control how long the note is available, not what a determined reader does with it.

Whoever opens the link first, wins

The link carries the key, so anyone who has the link can read the note until the view limit is reached. Send it over a channel you would trust with the note itself, and prefer a channel without link previews — a preview bot could consume the view.

Once it is gone, it is gone for you too

There is no copy on the server to recover, by design. Keep the original note in your vault if you may need it again.

It is a Pro feature

Burner notes are part of Scrinium Pro ($5/mo), alongside encrypted attachments, version history, graph view, templates, and the Dead Man’s Switch. The free tier stays unlimited for notes and sync.

Questions people ask

What is a burner note?

A note that is designed to be read once and then destroyed. Scrinium’s burner notes are end-to-end encrypted, limited to a set number of views, and expire after a set time — after which every request for them returns a plain 404.

How do self-destructing notes stay private if the server stores them?

The note is encrypted on your device with a fresh 256-bit key, and that key is placed in the URL fragment of the link — the part after the #, which browsers never send to a server. The server holds ciphertext and the policy (views, expiry) and has no way to open it.

Can I revoke a burner note after sending it?

Yes. The sender can delete a burner note at any time, and it becomes unreachable immediately. Expired, exhausted, and deleted notes all return the same 404, so a request cannot be used to work out whether a note ever existed.

How does this compare to a burn-after-reading service like Privnote?

The mechanism is the same category — one-time, expiring links with the key in the fragment. The difference is where it lives: in Scrinium it is part of the encrypted notebook you already write in, so you can draft a note privately, decide to send it, and keep everything in one place. A standalone tool is the lighter option when you only need the link and no account.

Is a burner note the same as email or a chat message?

No. Chat and email keep a copy on a server and usually keep it indefinitely, and the platform can read it. A burner note is ciphertext with a view budget, and both the copy and the key are under your control.

Send something you cannot unsend

Burner notes are part of Pro. Create a vault free, then upgrade when you need one.

Open Scrinium