SekretoPrivacy Policy
Effective 2026-11-03 · Sekreto (https://sekreto.tooly.fyi) is operated by itpro360 LLC (“we”, “us”).
The short version
- We can’t read your secrets. They’re encrypted in your browser. The key is the part of the link after
#, which browsers never send to us. A secret’s private label is encrypted with the same key. - You can use Sekreto without an account. Accounts are optional. The preferred way to sign in is Tooly SSO, our sign-in service; you can also create a Sekreto email account. Either way, we never see your password.
- We keep some information about how secrets are used (when a secret was opened, from which country, on what kind of device) so senders know their secret arrived, and so we can keep the service working and safe. This page lists all of it.
- No ads, no tracking cookies, and we don’t sell or share your data.
What we collect
| What | Details | How long |
|---|---|---|
| Secrets | Encrypted text and an encrypted private label. We can’t decrypt them. Read and Write PINs are stored only as one-way hashes. | Until the secret expires or is deleted |
| Secret details | When it was created, edited and when it expires; whether it has PINs; how many times it was opened; first and last open time. | While the secret exists, then a summary without content for 90 days so its owner can see what happened |
| A secret’s activity | For each open, wrong PIN or edit: time, IP address, approximate country (from Cloudflare) and browser type. | IP addresses removed after 30 days; the rest is deleted when the secret ends |
| Your Sekreto profile (only if you sign in) | From Tooly SSO: your user ID (sub), email, name, profile photo address, security access groups and whether Tooly marks you as an administrator. Plus: when you first and last signed in, your theme choice, whether you’re a Sekreto administrator, when you accepted these terms, and which secrets are in your account. If you connect an email account to Tooly, we keep both its email and your Tooly email on the same profile. | Until you delete your data in Sekreto (My secrets → Sekreto settings), or an administrator does |
| Sekreto email account (only if you create one) | Your email; a hash made from a hash of your password (never the password); your list of secrets’ keys and labels, encrypted with a key only your password or recovery code can produce (unreadable to us); a copy of that key encrypted with your recovery code; your authenticator app’s secret; one-way hashes of your backup codes; whether you must change a temporary password; when you signed up, last signed in and accepted these terms. | Until you delete your account or remove its password (My secrets → Sekreto settings), or an administrator does |
| Sign-in history | Each sign-in to Sekreto: time, method (Tooly or password), IP address, approximate country and browser type. You can see yours (without IP addresses) in My secrets → Sekreto settings. It’s part of the activity log below. | Shown to you for 90 days; kept 12 months in the activity log |
| Refused Tooly sign-ins | If Tooly SSO signs you in but Sekreto refuses (not in a Sekreto group, or blocked here): your Tooly user ID, name, email, profile photo address, the groups Tooly sent, the reason, when, how many times, and a reference code shown on the page, so an administrator can give you access without asking who you are. | Until you sign in successfully or an administrator dismisses it, and at most 90 days |
| Sign-in sessions | A session for each signed-in browser: start time, device type and approximate country. | Up to 12 hours |
| Site statistics | Daily totals: page views, unique visitors, countries, device and browser types, the website that linked to us (domain only), busiest hours and features used. Unique visitors are counted with a hash of IP address and browser that uses a random value replaced every day, so we can’t follow a visitor from day to day or recover their IP address. | About 120 days |
| Activity and security log | Sign-ins (with the method, your user ID, email and whether you’re an administrator), sign-outs, refused or failed sign-ins and lockouts, connecting or disconnecting Tooly, password, authenticator and recovery-code changes, use of the emergency (“break-glass”) administrator account, rate-limit blocks, wrong PINs, invalid manage links, requests for pages that don’t exist, administrator actions, settings changes, data exports, data deletions and server errors. Each entry has the time (UTC), IP address, approximate country and browser type. | 12 months |
| Deletion record | When your Sekreto data is deleted: your user ID, email, who deleted it, when, IP address and browser type, so we can show the deletion happened. | 12 months |
| Backups | Daily copies of the data above (secrets stay encrypted). | 14 days |
| Old Sekreto accounts (before Tooly sign-in) | If you had a Sekreto account before version 4: your email and your encrypted list, which only your old password can unlock. | Until you bring it over or close it after signing in with Tooly, or ask us to delete it |
Signing in
There are two ways to have a Sekreto account. Tooly SSO is preferred (below). A Sekreto email account uses an email, a password and a required authenticator app: your password turns into a key in your browser, so we can’t read your list of secrets. We can’t recover your password; an administrator can give you a temporary one, but the list of keys locked with the old password is then cleared (the secrets and their stats stay). Accounts are never merged because two emails match: to use both ways in, sign in to your email account and choose Connect Tooly SSO. You can later disconnect it, or remove your Sekreto password and use Tooly only; both need your password and an authenticator code.
Tooly SSO
Sekreto accounts use Tooly SSO (https://sso.tooly.fyi), a sign-in service also operated by itpro360 LLC. When you sign in, Tooly SSO sends Sekreto your user ID (sub), email address, name, profile photo, security access groups and whether you’re a Tooly administrator (people Tooly marks as administrator are Sekreto administrators too, unless an administrator turns that off). Your password, authenticator codes, recovery codes and sign-in history are handled by Tooly SSO and never seen by Sekreto. See Tooly SSO’s Privacy Policy for what it keeps.
What senders and recipients can see
If you open a secret someone sent you, its sender can see when it was opened, the approximate country and the device type (for example “iPhone · Safari · Philippines”). Senders never see your IP address. Wrong PIN attempts are shown to the sender the same way.
If you send a secret, anyone with the link (and Read PIN, if set) can read it, and anyone with its private manage link can see its activity, edit or delete it.
Who can see what
- You: your profile, your secrets’ activity and your data export.
- People you share with: the secret itself; senders see open activity as described above.
- Sekreto administrators: statistics, the activity and security log (including IP addresses), the list of people who have signed in and how they sign in, and secrets’ details. Never secret contents, labels, passwords or saved keys.
- Service providers: Cloudflare carries traffic to our server and tells us each visitor’s approximate country. Tooly SSO handles sign-in. Tooly Mail Relay, with SMTP2GO or Amazon SES, delivers the emails below.
- Authorities, only if the law requires it. Even then we can’t disclose secret contents, because we don’t have the keys.
Cookies and browser storage
Sekreto uses no tracking or advertising cookies, so there’s no cookie banner. If you sign in, one strictly necessary cookie keeps you signed in for up to 12 hours, and short-lived cookies (10 minutes) protect the sign-in itself and, if Tooly sign-in is refused, let the next page show which Tooly account was refused. Your browser’s local storage keeps: your Light / Dark / Auto theme choice, the list of secrets you made on that device (with their keys, so you can manage them), and, while you’re logged in with an email account, the key that unlocks your list. Nothing in local storage is sent to us. Clearing your browser data removes it.
Requests to other sites
If you’re signed in, your profile photo is loaded from Tooly SSO. Sekreto loads nothing else from other sites.
Emails
Sekreto sends only these emails: “your secret was opened” (if you turn it on for a secret, Tooly accounts only), and alerts to administrators when someone signs in to the admin console or uses the emergency administrator account. They come from [email protected]; replies go to the contact address below.
Emails are handed to Tooly Mail Relay, a mail service run by itpro360 LLC on the same server, which delivers them through SMTP2GO or Amazon Web Services (Amazon SES); an administrator can also send directly through SMTP2GO or Amazon SES. These providers see the recipient address and the message, and keep delivery logs under their own policies. Open and click tracking is turned off. We don’t keep copies of emails; Sekreto’s activity log records that an email was sent or failed (recipient, kind, time), never its contents or links.
Why we use it (legal bases)
- To provide the service you asked for (contract): storing and delivering secrets, accounts, open statistics for senders and the emails you turn on.
- Legitimate interests: keeping the service secure and preventing abuse (security log, rate limits), and understanding usage in aggregate to improve it (site statistics). We chose privacy-friendly methods for both.
- Legal obligations, where the law requires us to keep or disclose information.
Your rights
Depending on where you live (for example under the GDPR in the EU/UK or the CCPA/CPRA in California), you can ask to access, correct, export or delete your information, or object to how we use it. You can do most of this yourself: Download my data and Delete my data in Sekreto are under My secrets → Sekreto settings; Tooly accounts correct their name, email and photo at Tooly SSO; you can delete any secret from its manage page. For anything else, or to complain, contact us at the site owner (no contact email has been set yet; reach us through the site where you found Sekreto). You can also complain to your local data protection authority. We won’t treat you differently for using these rights.
Security
Secrets and labels are encrypted in your browser (AES-256-GCM). Traffic is encrypted in transit (HTTPS). Sign-in uses Tooly SSO, or a password plus a mandatory authenticator for email accounts. Accounts with a password lock for 15 minutes after 5 failed attempts; the emergency administrator account has 1-hour sessions and every use of it is logged and reported to the site’s contact address; PINs and sign-ins are rate-limited. No system is perfectly secure; keep your links, manage links and Tooly account private.
Where your data is
On a server operated by itpro360 LLC in the United States. If you use Sekreto from elsewhere, your information is handled in the United States.
Children
Sekreto isn’t meant for anyone under 16, and we don’t knowingly collect their information. If you believe someone under 16 is using it, contact us and we’ll delete their data.
Changes
If we change this policy we’ll update the date at the top and note it in the changelog. Significant changes will be shown on the site before they take effect.
Contact
itpro360 LLC · the site owner (no contact email has been set yet; reach us through the site where you found Sekreto)