Anyone can write.
Only you can read.
Every postbox is a 7-character handle — three letters, four digits. Share it anywhere. Only the holder can open what arrives.
Your letter is sealed and encrypted on your device before it ever leaves. No server, no operator, no third party sees the content.
The letter drops into the right slot, addressed to one person only. No queue, no copies, no carbon trail. No archive anywhere.
You open your postbox, read the letter. Then it turns to ash. Twenty-four hours after opening, it's gone — by design, not by accident.
The internet was designed to route information. It was not designed to respect the difference between broadcasting and private correspondence.
Email is permanent. Social messaging is logged. Even "encrypted" apps store metadata, require accounts, and retain the ability to hand over what they have. We built the postbox that the internet needed — one where privacy isn't a feature, it's the foundation.
No account. No logs. No metadata. No second chance. By design.
Messages are sealed client-side before transmission. The server stores ciphertext it cannot decrypt — not now, not ever, not under subpoena.
A postbox handle is all you need. No email, no phone, no password, no recovery path. The postbox can't be taken away because it isn't tied to an account.
The burn isn't optional. 24 hours after opening, the letter is gone regardless of whether you saved anything. Some things shouldn't be archived.
Unlike ephemeral chat, your postbox handle stays the same. Give it to someone once. They'll use it whenever they need to reach you privately.
Some letters shouldn't live forever. The postbox was always the right model — ephemeral, addressable, personal. We've just updated the implementation.
Get your postbox