VaultShare vs BurnPony Self

VaultShare sends your files and messages straight to another device over an end-to-end encrypted, peer-to-peer connection. Your data travels directly between the two devices and is never uploaded to or stored on any server. No accounts. No cloud. No tracking. Just open the app, pair with a short code or a QR scan, and share. HOW IT WORKS 1. One device taps "Generate Secret Room" to get a 6-digit code (e.g. 529-194) and a QR code. 2. The other device enters the code — or scans the QR — to join. 3. Both screens show a security verification code. Confirm they match to rule out a man-in-the-middle; transfers stay locked until both sides verify. 4. Pick your files and they stream directly to the other device, each chunk encrypted and checksum-verified on arrival. You can also chat securely over the same connection. REAL END-TO-END ENCRYPTION • ECDH (P-256) key exchange with HKDF-SHA256 to derive a shared session key • AES-GCM-256 authenticated encryption on every file chunk and message • SHA-256 integrity check on every received file • A human-comparable security code to defeat man-in-the-middle attacks • Keys are generated and held only on your two devices — we never see them PEER-TO-PEER, NOT THE CLOUD Files and chat move over a direct WebRTC connection between the two devices. A lightweight signaling server only helps the devices find each other; it never receives your file contents, messages, or keys. There is no storage server holding your data. PRIVATE BY DESIGN • No sign-up, no login, no profile • No analytics, advertising, or tracking • No personal data collected • The camera is used only to scan room QR codes — nothing is recorded SECURE CHAT Send end-to-end encrypted messages to your peer over the same private channel. WORKS WITH THE WEB APP VaultShare uses the same protocol as the VaultShare web client, so you can share phone-to-phone or phone-to-browser, in either direction. Note: VaultShare connects two devices through a signaling server to establish the peer-to-peer link. On some restrictive networks a relay (TURN) may be used to complete the connection; it only ever forwards already-encrypted data. Your files stay yours.

Write a secret. Share one link. It reads once and burns. BurnPony encrypts your note on your phone before anything is sent. The server stores only ciphertext it cannot read, the decryption key travels in a part of the link that browsers never transmit, and the recipient needs nothing but a browser. No app on their side, no account on yours. WHAT IT DOES One link, any recipient, any device with a browser. View limits from 1 to 100, expiry from 5 minutes to 30 days, an optional auto-hide timer after reveal. Optional passphrase as a second factor, shared through a different channel than the link. Read receipts, honestly: the recipient is told before they open. No silent tracking, ever. Labels that never leave your phone: name a note "wifi password for mom" and the read notification says so, while the server knows nothing. Sent Notes: live status, view counts, change the expiration after sending, burn early with a swipe. The recipient page speaks nine languages, following the reader's browser. WHY YOU CAN CHECK INSTEAD OF TRUST The entire system is open source: this app, the server, and the recipient page, with a written protocol specification and cross-implementation test vectors. The note page is byte-reproducible from its published source, so View Source is a real audit, not a gesture. You can even run your own server and point the app at it from Settings. HONEST LIMITS Self-destruction limits exposure; it cannot un-share. A recipient can always copy or photograph a revealed note, and BurnPony says so on the note page itself, because a privacy tool that overpromises is worse than none. From NorseHorse, maker of PGPony, CarrierPony, AgePony, RelayPony, and QuorumPony.