GhostCode vs Sesam

Send a photo everyone can see. Hide a message only your person can read. GhostCode hides a real, encrypted message inside an ordinary photo. Write up to 4,000 characters, pick any picture, and set a Key. You get back a photo that looks completely normal. Text it, post it, share it anywhere. Only someone with GhostCode and your Key can open what is inside. One image. Two audiences. You decide who gets the real meaning. WHAT PEOPLE USE IT FOR • A love note hidden inside the photo you send every morning • A scavenger hunt clue only the birthday person can unlock • A members-only drop for your fans behind one ordinary picture • The wifi password for your houseguests, inside the welcome photo • A whole letter, not a one-liner: up to 4,000 characters per photo HOW IT WORKS 1. Write your message and pick a photo (or a QR code) 2. Set a Key, a passphrase only you and your people know 3. Share the photo anywhere, like any other photo 4. They open it in GhostCode, enter the Key, and unlock the real message MORE THAN PHOTOS • Pixel Ghosting: on-device AI bonds your encrypted message to the picture, and the photo looks identical to the naked eye • QR mode: pack your message into a QR code that scans on any phone • Decoy Link (QR): one code, two destinations. Everyone gets a public page, people with the Key get the real one • Failsafe: a decoy Key reveals an alternate message • Self-destruct: a reveal stops working after the window you choose PRIVATE BY DESIGN • No account, no sign-up, no login • Your readable message and your Key never leave your device • Strong, standard encryption (AES-256-GCM with passphrase hardening) • Sensitive screens are protected, and data deletion is honored in-app GHOST MODE (optional upgrade) GhostCode is free to use, with some limits. Ghost Mode unlocks unlimited protected creates, unlimited saved Keys, Decoy Link, extended self-destruct timers, and Failsafe filters. Ghost Mode is a subscription billed weekly or yearly (with a free trial on the weekly plan). It renews automatically unless cancelled, and you can manage or cancel anytime from your store account. Full terms are shown on the purchase screen. A NOTE ON HOW IT STAYS SECURE Revealing a protected message needs a one-time check with GhostCode's verification service, which stops brute-force guessing and lets messages self-destruct or be revoked. GhostCode never sees your Key or your readable message. For photo (Pixel Ghosting) messages, your encrypted message is stored on GhostCode's servers for the message's lifetime, so it can be revealed and auto-deleted; it stays encrypted and cannot be read without your Key. It is deleted at self-destruct or expiry, or right away when you request data deletion. Questions or feedback? support@moonsailsoftware.com Privacy Policy: https://moonsailsoftware.com/ghostcode/privacy/ Terms: https://moonsailsoftware.com/ghostcode/terms/

Sesam protects what is yours: your messages, your photos, your papers, your passwords, your crypto. Everything is encrypted on your phone. Nothing leaves for a server — there is none. MESSAGES NO ONE ELSE CAN READ Write your message: Sesam turns it into an unreadable block. Send it anywhere — SMS, WhatsApp, email, it doesn't matter. Only the person who holds your key can read it. That key was exchanged in person, by scanning a QR code. It never went through the internet: there is nothing to intercept. Photos and videos included. And the Sesam keyboard encrypts what you type without leaving the app you're in. A KEY YOU CONTROL A safety number, compared out loud, confirms no one slipped in between you. One key can bring a group together — and be replaced when someone leaves. In doubt? Renew it in one gesture; the old one stops working instantly. THE MESSAGE THAT DOESN'T LOOK LIKE A MESSAGE Your encrypted message can hide inside an ordinary conversation you write yourself. On screen, everyday sentences. The secret travels between the letters, invisible. A TRUE COLD WALLET Bitcoin, Litecoin, Ethereum and EVM networks — Polygon, Base, Arbitrum, Optimism, BNB Chain, Avalanche. The key is born on your phone and never leaves it. Receiving needs no connection: the chain records. To send, paste the transaction prepared on a connected device: Sesam shows it IN THE CLEAR — network, recipient, amount, maximum debit — and signs only after Face ID, offline. No more blind signing. Your balance? A watch-only export to scan in a connected app: it sees everything, can spend nothing. And your 24 words stay encrypted in the vault, checked as you type — a copy error shows immediately, not the day it's too late. A SAFE IN YOUR POCKET Photos, videos, documents, notes, passwords: everything behind your code. Your credentials live in masked cards, copied to a clipboard that erases itself. A scanner straightens your papers without touching the photo roll. And from any app: Share, then Sesam — encrypted, filed, and the original can disappear for good. NO ONE KNOWS SESAM EXISTS Sesam can take the appearance of another app — about fifteen disguises, with the real icon and the real interface. Which ones? That's exactly what we don't say. A second code opens a decoy vault, filled with conversations you wrote yourself. A third erases everything. FOR THE HARD MOMENTS Before a border, travel mode takes the key out of the phone: your files remain, but become unreadable. The access log tells you who tried to open, and when — with their photo if you wish. Too many failures, or too many days without opening: everything is erased. NOTHING IS EVER LOST Twenty-four words, written on paper, are enough to recover everything on a new phone — and only they can. A printable sheet keeps them safe from a breakdown. A sealed archive under a secret phrase carries everything — without a server. ON YOUR WRIST, AND ON YOUR MAC Read a message on Apple Watch, iPhone still in your pocket. On the Mac, Sesam waits in the menu bar and encrypts what you just copied. DON'T TRUST US. VERIFY. Switch to airplane mode: everything still works. Then open Settings, Privacy, App Privacy Report: iOS records every connection of every app there. Next to Sesam, the list stays empty. That's not a promise. It's a record kept by your own phone. FOR EXPERTS • Cascade AES-256-GCM then XChaCha20-Poly1305, two authenticated layers • Argon2id, 64 MB per attempt — beyond OWASP recommendations • Wallet: BIP-39/32/44/84, PSBT, EIP-1559 — verified against reference implementations • No account, no server, no usage analytics