Mann Ni Vaat

Privacy Policy

Last updated: 11 October 2026

Mann Ni Vaat lets you send one secret message or drawing that opens once and is then deleted. This service is provided for learning, education and entertainment.

How your secret is protected

  • Your message or drawing is encrypted in your browser before it is sent to us, using AES-256-GCM. The key is placed in the part of the link after the #. Browsers do not send that part to servers, so we never receive the key and cannot read your secret.
  • If you add a secret phrase, the receiver needs both the link and the phrase. We never receive the phrase.
  • Anyone who has the link (and the phrase, if you set one) can open the secret, and only the first person to open it will see it.

What we store, and for how long

  • The encrypted secret. It is deleted the moment it is opened, or automatically after 7 days if unopened.
  • The optional hint, if you add one, and a random salt used with the phrase. These are not encrypted, so never put the phrase or anything private in the hint. They are deleted together with the secret.
  • A short-lived counter tied to your network address, used only to limit abuse. It expires within an hour.

We have no accounts and do not ask for your name, phone number or email. We do not sell data. We do not use advertising trackers. Your chosen language is saved in your own browser only.

Analytics

We use Vercel Web Analytics to count visits to the site and Vercel Speed Insights to measure how fast pages load, which helps us see whether it is working. We remove the part of the address after the #, any query string, and the secret's id before anything is sent, so the analytics never receive a key or an id. Pages such as a secret link are recorded only as /m/[id]. Vercel describes what it collects, and how it avoids cookies, in its own documentation.

What we cannot protect you from

  • Screenshots, screen recordings, or someone photographing the screen with another device. Nothing in a web browser can prevent this. Send secrets only to people you trust.
  • Sharing the link with the wrong person, or a link that someone else sees before the receiver does.
  • A weak secret phrase that someone can guess.
  • Malware or other people with access to your device.

We describe our protections as accurately as we can, but no system is perfectly secure, and we do not promise that it is.

Service providers

The site runs on Vercel (including Vercel Web Analytics and Speed Insights) and keeps encrypted data in Upstash Redis. These providers process technical data such as IP addresses to deliver the service, under their own policies.

Contact

Questions or reports of misuse: info@thitainfo.com. Because we cannot read secrets, we cannot recover or review a secret for you.