Wisp

Terms of Service

Last updated 18 July 2026

BA | Wisp is a service operated by Aletheia Tech Ltd for sending encrypted, self-destructing messages, with an optional cryptographic proof that a message existed and was transmitted.

By creating a message you agree to these terms. Reading a message you were sent does not require an account and is governed only by the sections on acceptable use.

What the service does

Your browser encrypts your message before it reaches us. We store only the ciphertext. The decryption key travels in the part of the link after the '#', which browsers do not transmit, so we never receive it and cannot read your content.

You choose how long a message lives, how many times it can be read, and whether to protect it with a password. When those limits are reached the content is deleted.

You may optionally anchor a message: we publish a one-way hash of the ciphertext to public blockchains (Polygon and Bitcoin). This creates a permanent, public record that the encrypted message existed at that time. It reveals nothing about the content.

What we can and cannot prove

Anchoring proves that a specific encrypted message existed at a specific time and was transmitted through the service. This proof does not depend on trusting us and survives even if we cease to operate.

Anchoring does NOT prove that a message was destroyed, and we make no such claim. Destruction is not provable: a recipient who has read a message can copy or screenshot it, and no technology prevents that. We report deletion of content from our own systems in good faith, but that report is our statement, not a cryptographic guarantee.

You must not represent our service as providing proof of destruction, or rely on it as such.

Your responsibilities

You are responsible for the content you send and for having the right to send it. Because we cannot read content, we cannot pre-screen it; accountability rests with the account that created it, which is why creating a message requires signing in.

The optional label on a message is the only field we can read. Do not put confidential information in it.

If you lose a link, the content is unrecoverable, by us and by you. There is no recovery mechanism, by design.

Acceptable use

You must not use the service to distribute malware, conduct phishing, harass, or transmit content that is unlawful in the jurisdictions that apply to you.

Because our systems cannot read content, we rely on reports. Anyone may report a link. On a valid report we will destroy the reported content, which we can do without the key, and may suspend the account that created it.

Availability and liability

The service is provided as is. We do not warrant uninterrupted availability. Anchoring depends on public blockchains and third-party timestamping networks whose timing we do not control.

To the extent permitted by law, Aletheia Tech Ltd's liability arising from the service is limited to the amount you paid us, if any, in the preceding twelve months.