You're at the post office.
But it already works for sending mail. It looks simple on purpose, so you can shape it: tell us what you want with the Feedback button in the corner, and help decide how the finished building will look.
Write a letter, get a link, give it to someone.
Your browser keeps your lockers until you clear its data. Your lockers
The envelope. Write on it where it shows its words.
to: from:
Open a letter or a locker
How safe is this?
- Your letters are encrypted. A letter is locked in your browser before it is sent, and only unlocked in the browser of someone who holds the key. Bloob Haus's servers never see what you wrote.
- Stored in Europe, under European law. Letters live on servers in Paris run by Scaleway, a French company, and travel straight there without passing through a US company's servers. The EU's privacy law (GDPR) is much stricter than anything in the US. Scaleway has no US parent and no US offices, so the US CLOUD Act, which lets US authorities demand data from companies under US jurisdiction even when it is stored abroad, does not reach it.
- Signing in uses Google. Google knows when you sign in here, and that is all it sees of how you use Bloob Haus. We receive your name, email address and profile picture from it. Nothing else.
Just for your understanding: there is no person behind this counter. The post office is software, and nobody sits and reads envelopes. In the worst case, the people who build Bloob Haus could read an envelope (who a letter is to and from), but not the letter inside, with one exception for signed-in accounts explained below. We don't go looking. For comparison: most big services, Google included, keep your mail and files in a form they can read themselves.
For encryption nerds
- The envelope is not locked. Who a letter is to and from, its dates, and anything else written on the envelope can be read by the post office, like the outside of a paper letter. Only people with the link see it.
- The link is the key. The part after the # never reaches our server. Anyone you give the link to can open the locker, so share it the way you would share a house key.
- Signed in, we keep a spare key for you. That is how your lockers open on a new device with only your Google login. The spare key is stored encrypted, and the post office's master key can unlock it. We use it only when you ask, for example to open a locker from Your lockers, and every use is logged. A way to hold your own key with your own password, so that nobody else can open your letters, not even us, is planned but not built yet.
- If someone broke in. A stolen copy of our database and storage holds only locked letters. The master key sits in a separate key vault and never leaves it. Lockers sent without signing in would stay locked even if that vault were broken into too, because their key was never here.