Frequently Asked Questions (FAQ)
Everything you need to know about how ReaDelete encrypts your data, protects ID copies, prevents chat bot destruction, and guarantees permanent RAM erasure.
1. Can ReaDelete or its hosting provider read my messages?
No—it is mathematically impossible. All encryption takes place locally inside your web browser using the W3C Web Crypto API (AES-256-GCM) before any data leaves your device. The 256-bit decryption key is placed after the # symbol in your shareable link. Per RFC 3986, web browsers never send the # fragment to the server.
2. Can a destroyed or expired message be recovered?
Never. We do not use disk databases, write-ahead logs, or backup snapshots. The encrypted payload exists solely in volatile RAM until the moment it is viewed once (or expires), at which point it is permanently deleted from memory. Even under legal compulsion, we cannot recover data that no longer exists.
3. Do WhatsApp, iMessage, Slack, or Telegram link previews burn my note?
No. Many legacy tools destroy notes on the initial HTTP GET request, which causes chat preview bots to burn links before the recipient clicks them. ReaDelete requires an explicit human interaction (clicking "Decrypt & Destroy Message Now" via POST /api/notes/:id/burn) to release and shred the payload.
4. How does the Live Sender Read-Receipt Radar work?
After you generate a link, your screen displays a live status indicator that polls an anonymous receipt endpoint every 1.5 seconds. The exact second your recipient clicks to decrypt the message, your indicator turns green and displays the exact timestamp of destruction.
5. What happens if I sent a link to the wrong person? (Kill Switch)
As long as the recipient has not opened the link yet, you can click the red 🛑 Kill Switch: Revoke Link Now button on your confirmation screen. This immediately purges the encrypted payload from server RAM, rendering the shared link dead (`410 GONE`).
6. How does the ID Card Redaction & Watermark tool protect me?
When you attach a photo of a passport, ID card, or driver's license, ReaDelete loads it onto a local HTML5 Canvas inside your browser. You can drag across sensitive fields (like your SSN, BSN, or portrait) to permanently black them out, and overlay a diagonal text stamp with the recipient's name and current date. The flattened image is then encrypted with AES-256-GCM and destroyed after one view.
7. Can I attach a regular screenshot or QR code without a watermark?
Yes. When you attach an image, simply toggle the Watermark switch to "Without watermark (Original photo / Screenshot / QR)". You can still use the black redaction marker if needed, and the image will be encrypted and destroyed after one view.
8. What is the Anti-Shoulder-Surf Blur Shield?
When enabled (default), the decrypted secret stays visually blurred on the recipient's screen upon opening. The recipient can click "Copy Secret Directly" to copy the password straight to their clipboard without ever revealing the characters to people standing behind them or watching a screen share.
9. What is "Request a Secret" mode?
If you are an accountant, IT admin, HR manager, or landlord and need a client to send you a password or watermarked ID card, click 📥 Request a Secret. You can specify what you need and send the client a guided intake link so they don't email you sensitive data in plaintext.
10. What happens if the recipient never opens the link?
Every note has a configurable Unread Expiration timer (1 Hour, 24 Hours by default, or 7 Days). If the link is not opened before the timer expires, our automated memory sweep permanently purges the encrypted slot from RAM.