Send the secret link and key through different channels.
Encryption happens locally.
The plaintext and master key are never sent to the server.
Secret created
Convenience combined link — weaker
This puts the complete key in the URL fragment.
The fragment is not sent to the server, but can remain
in browser history, screenshots, clipboard managers,
or compromised extensions.
One-time secret waiting
Nothing has been retrieved yet.
A valid reveal permanently destroys the server copy.
The server is not contacted until Reveal & Burn is clicked.
Secret revealed
Server copy destroyed.
Secret unavailable
This secret may have expired or already been retrieved.