Frequently Asked Questions (FAQ)

Find answers to the most common questions about Parchemin, our cryptographic architecture, note self-destruction, and business-focused features.

What is Parchemin?

Parchemin is a privacy-focused, zero-knowledge secret-sharing platform. It enables individuals and organizations to share sensitive text, passwords, API keys, and confidential notes using client-side encryption and self-destructing links.

How does Parchemin's zero-knowledge encryption work?

When you write a note in Parchemin:

A unique, high-entropy cryptographic key is generated locally in your browser.
Your note is encrypted on your device with the OpenPGP standard before it is sent.
The server receives only the OpenPGP encrypted text (ciphertext) and a technical identifier.
The decryption key is included only in the link fragment (the # portion of the URL).

Because web browsers never send URL fragments (#...) to servers in HTTP requests, the key stays exclusively on your machine. Parchemin's servers never see, store, or log your key or plaintext note.

Can Parchemin or a third party intercept and read my notes?

No. Thanks to our zero-knowledge architecture, no one - neither Parchemin, your internet service provider, nor any intermediary - can decrypt your note without the complete link fragment. Even if our database is seized or compromised, it contains only indecipherable encrypted data.

What does "Burn after reading" mean?

When "Burn after reading" is enabled, the encrypted note is deleted from our database as soon as the recipient reads it for the first time (or after a configurable number of accesses). Once read, the link becomes immediately and permanently invalid.

What happens when the expiration date is reached?

If a note is not viewed before its validity period ends (for example, 1 hour, 24 hours, or 7 days), our automated background processes permanently erase the encrypted content from storage. Expired data cannot be recovered.

Why does Parchemin show no ads?

Most free note-sharing tools depend on third-party ad networks and trackers to monetize their audience. These third-party scripts introduce major security vulnerabilities and data-leak risks. Parchemin is 100% ad-free and tracker-free, transparently funded by our subscriptions for teams and businesses.

What are Company and Team Policies?

In businesses, data breaches often occur when users choose security settings that are too permissive. Parchemin Enterprise enables administrators to impose global rules on all collaborators:

Limit the maximum expiration period (for example, 24 hours maximum).
Require a secondary password for outbound notes.
Require systematic self-destruction after the first reading.

Does the recipient need to create an account or install software?

No. The recipient needs neither an account nor an extension. They simply open the link in a modern browser. The browser uses OpenPGP to decrypt the note instantly on their device.

Can I add a custom password to a note?

Yes. In addition to the cryptographic key generated in the URL, you can require a custom password. The content is then additionally encrypted using the OpenPGP symmetric standard, requiring the recipient to enter the passphrase to decrypt the message.

Where is Parchemin hosted, and is it GDPR-compliant?

Parchemin is designed and operated by The Quiet Bot EI, a company based in Lyon, France. All our servers are located within the European Union, in full compliance with the General Data Protection Regulation (GDPR). We collect no personal data or tracking cookies from anonymous users.