Terms of Use

Agreement to these terms

These Terms of Use govern your access to and use of SecretPNG (secretpng.com), operated by SecretPNG (legal entity to be confirmed before launch). By using the site or its tools, you agree to these terms. If you do not agree, do not use the service.

The Privacy Policy, Cookie Policy, Acceptable Use Policy, and other posted policies are part of these terms by reference. If these terms conflict with another posted policy on a specific point, the more specific policy controls for that point.

What SecretPNG is

SecretPNG is a free, browser-based toolkit for file privacy and security: encryption and decryption, encrypted vaults, ZIP handling, metadata removal, redaction, file scanning, password and secret generators, hashing, QR codes, recovery sheets, and local private notes. These core tools run entirely in your browser; your files, passwords, keys, and generated secrets are never transmitted to or stored by SecretPNG.

One feature is hosted: secure secret links, where our servers store browser-encrypted ciphertext and minimal metadata so a link can be shared, expire, or self-destruct. We never hold the decryption key and cannot read the secrets. The Privacy Policy describes this in detail.

There are no user accounts at launch. The service is provided free of charge; public informational pages may display advertising as described in the Advertising & Analytics Disclosure.

Beta status

SecretPNG is in beta. Features may change, break, or be removed. The software has not been independently audited. We publish our encryption formats openly so they can be reviewed, but you should treat the service as evolving software and act accordingly: keep independent backups of anything important, and do not make SecretPNG the only place a critical secret or file exists.

Eligibility

You must be at least 13 years old (or at least 16 where local law requires) to use the service, and old enough to form a binding contract in your jurisdiction or have a parent or guardian's permission. By using the service, you represent that you meet these requirements.

Your responsibilities: passwords, keys, and backups

The security model of SecretPNG puts you in sole control of your passwords and keys. That control has a cost: if you lose a password or key, SecretPNG cannot recover your encrypted data. There is no reset flow, no recovery support, and no backdoor. This is by design.

You are responsible for:

• Remembering or safely storing every password, passphrase, and key you use with the tools.
• Keeping independent backups of original files before encrypting, redacting, or otherwise transforming them.
• Storing recovery sheets you generate somewhere safe and offline.
• Verifying that a tool's output meets your needs before relying on it (for example, confirming a redaction actually removed what you intended).
• Complying with laws that apply to your use, including export, privacy, and content laws in your jurisdiction.

Secure secret links

When you create a secret link, you choose its lifetime (from 10 minutes up to 7 days, or single-view). Ciphertext is deleted at first retrieval, manual burn, or expiry, whichever applies. Deleted ciphertext is gone; we cannot restore an expired or burned link.

You are responsible for how you share the link. Anyone who obtains the full link, including the fragment containing the key, can read the secret if views remain. Treat the link itself as the secret.

We may delete hosted ciphertext without notice when abuse indicators are present or when a valid legal requirement obliges us to, even though the content is unreadable to us. We do not guarantee that any secret link will remain retrievable for its full chosen lifetime.

Acceptable use

You must follow the Acceptable Use Policy, which prohibits, among other things: distributing malware, phishing and credential theft, harassment, extortion, illegal content, copyright infringement, automated mass creation or other abuse of secret links, circumventing lawful access controls, storing harmful payloads in hosted features, and denial-of-service activity.

Because the core tools run locally and we never receive your files, we do not and cannot monitor what you process with them. Prohibitions on local-tool misuse are obligations on you, not a claim that we inspect your content.

Intellectual property and feedback

The SecretPNG site, its content, and its software are owned by SecretPNG or its licensors and are protected by applicable intellectual property law. We grant you a limited, non-exclusive, non-transferable, revocable license to use the service for its intended purpose. Open-source components we use or publish are governed by their own licenses, which control over this section for those components.

You keep all rights to your own files and content. Because we never receive files processed by the local tools, no license to us is needed or implied for them. For hosted secret links, you grant us only the minimal right to store and transmit the ciphertext as necessary to operate the feature.

If you send us feedback or suggestions, you grant us a perpetual, irrevocable, royalty-free license to use them without restriction or compensation. Feedback is voluntary; do not include confidential information or secrets in it.

Disclaimer of warranties

The service is provided free of charge, in beta, and "as is" and "as available," without warranties of any kind, express or implied — including implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement. We do not warrant that the service will be uninterrupted, error-free, or secure, that defects will be corrected, or that any tool's output (including encryption, redaction, metadata removal, or scanning results) is complete or suitable for any particular purpose.

Some jurisdictions do not allow certain warranty disclaimers, so parts of this section may not apply to you. Nothing in these terms excludes liability that cannot lawfully be excluded.

Limitation of liability

To the maximum extent permitted by law, SecretPNG and its operators, contributors, and suppliers will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost data, lost profits, lost secrets, unrecoverable encrypted content, or business interruption, arising out of or related to the service — regardless of the theory of liability and even if advised of the possibility of such damages.

To the maximum extent permitted by law, our total aggregate liability for all claims relating to the service will not exceed one hundred US dollars (US $100) or the amount you paid us for the service in the twelve months before the claim (which, for a free service, is zero), whichever is greater.

In particular, and without limiting the above: we are not liable for data you cannot decrypt because a password or key was lost, for secrets that expired or were burned as configured, for hosted ciphertext removed for abuse or legal reasons, or for consequences of sharing a secret link with the wrong person.

Indemnification

You agree to indemnify and hold harmless SecretPNG and its operators from claims, damages, and reasonable costs (including attorneys' fees) arising from your violation of these terms, your violation of law, or content you create, share, or process using the service. This obligation survives any termination of these terms.

Availability and changes to the service

We do not guarantee that the service, or any feature of it, will be available at any particular time or at all. We may modify, suspend, or discontinue any part of the service at any time, with or without notice, including during maintenance, in response to abuse, or as the beta evolves. Where reasonably practicable, we will give advance notice before discontinuing the secret-link feature so outstanding links can run out their lifetimes.

Suspension, termination, and removal of hosted content

We may block, rate-limit, or terminate access to the service, and may remove hosted content (secret-link ciphertext), if we reasonably believe these terms or the Acceptable Use Policy have been violated, if required by law, or to protect the service and its users. Because there are no accounts, enforcement typically operates at the level of network identifiers and individual hosted items.

You can stop using the service at any time. Local data (including private notes) is under your control in your own browser; hosted secret links can be deleted early using their management links.

Changes to these terms

We may update these terms from time to time. Material changes will be posted on the site with an updated effective date before they take effect. Your continued use of the service after the effective date constitutes acceptance of the updated terms.

Governing law and venue

[Governing law and venue to be confirmed with counsel]. Until that placeholder is resolved, no choice of law or forum is represented here, and mandatory consumer protections of your place of residence remain unaffected in any event.

Contact and draft status

Questions about these terms can be sent to support@secretpng.com.

This document is a draft prepared for launch and requires review by qualified legal counsel before public launch.