HANDOVER
READY
P2P · E2EE · ZERO RETENTION

The server never sees it. It cannot.

Handover introduces two browsers to each other and steps aside. The key is generated on your machine, the payload travels directly, and nothing is written down at either end.

What the broker holds

session descriptorstransient
encryption keynever
payloadnever
logs of either partynone
account recordsno accounts

If we were compelled to hand over everything we hold, it would amount to a few seconds of connection metadata.

Nothing is stored
No ciphertext at rest to subpoena or leak.
The broker is blind
Connection setup only. It never holds the key.
It dies with the tab
Close it and the secret is gone. Nothing to delete.

How Handover works

Handover moves one secret from one browser to another without a server ever holding it. You arm a room, send a link, and the two browsers talk to each other. When it is done there is nothing to delete, because nothing was written down.

Nothing is stored on our servers. The whole service is hosted on Cloudflare, with no database, no file storage and no logging switched on. Ever.

If you are receiving

  1. Say who you are, what it is about, and what you are expecting. All three are shown to the sender so they can see the request is genuine.
  2. Click Open in my mail client. The invitation is written for you. Add their address and send it from your own mailbox, so it arrives looking like you rather than like a phishing attempt.
  3. Leave the tab open and go and do something else. The transfer completes on its own whenever they connect.
  4. Come back later, copy the secret into your password manager, close the tab.

If you are sending

  1. Open the link you were sent. No account, no sign-up, nothing to install.
  2. Check the panel showing who is asking, what it relates to, and that the link was prepared for you.
  3. Paste the secret and click Connect and send. If they are offline your tab waits until they are back.
  4. Close the tab. Your copy is cleared the moment it is away.

What we can and cannot see

the secret itselfnever
who it is from and aboutnever
that a room existedyes, plus both IPs and timing

When the two browsers cannot reach each other directly, the encrypted packets are relayed through Cloudflare. They still cannot be read, and each transfer tells you which route it took. We keep no logs: request logging is switched off and there is no database or file storage in the service to write to. Cloudflare still counts traffic at the platform level, as any host does, but that is volume and not content.

What you need

If it does not work

Sleep, a closed tab or a reboot ends the room, and a link only ever works once. In every case nothing is disclosed and nothing is left behind: arm a new room and send a new link. A missed handover is a missed phone call, and there is deliberately no voicemail.