You set a Brain Key.
A passphrase only you remember. We never see it. We never store it. Argon2id on your device derives the master key.
BlackSite is an end-to-end-encrypted vault. Your files are encrypted with a key derived from a passphrase only you remember. We can't read them. We can't recover them. We can't be compelled to decrypt them — the keys do not exist on our servers.
Three steps, all of them on your device. The server never sees the inputs that matter.
A passphrase only you remember. We never see it. We never store it. Argon2id on your device derives the master key.
XChaCha20-Poly1305 with a fresh per-file key, wrapped with the master key. Bytes leave your device opaque.
Server stores the wrapped blobs in Zürich Minio. We have no way to decrypt them. Compulsion is a non-event.
XChaCha20-Poly1305 + Argon2id, derived in your browser. Server sees ciphertext only. No backdoor. No "encrypted but we hold the keys" sleight of hand.
Storage in Zürich. Operating under revFADP / nDSG, not EU GDPR. We host as a processor of opaque ciphertext — no personal-data processing relationship for vault content.
A 12-word recovery phrase, generated and shown once at signup. Save it. Lose it and the data is gone. This is the trade-off for "we cannot read your data" being literally true.
Identical XChaCha20-Poly1305 + Argon2id stack on every tier. Cancel any time. CHF / month, billed monthly.
Plus media archives, journal, encrypted notebooks.
Choose standardiCloud, Google Drive, Dropbox all encrypt your files. They also hold the keys. We don't.