One-way · Anonymous · Yours
ignotu
Security
Encrypt first. Hold little. Delete after.
ignotu is a relay, not an archive. What we can see is what we are willing to keep, which is almost nothing.
01
Keys on the device
Each phone makes its own key pair. Public keys register so people can encrypt to you. Private keys never leave the device.
02
Ciphertext on the relay
The server holds encrypted payloads until they are delivered or the hold window ends. Then that ciphertext is deleted. Receipt times may remain. Bodies do not.
03
Hashed contacts
Matching uses hashes, not a copy of your address book in logs. A match shows “Someone in your contacts.” No match shows “Anonymous.” The thread never prints a number.
04
Block one sender
Block applies to that identity only. Report with a reason and any note you still have locally. After delivery, we cannot pull a body back from the server.