About Waystation

Waystation provides a short-lived place to exchange text and Markdown without creating an account or a permanent inbox. Choose a lifetime of 15 minutes, 1 hour, 6 hours, or 24 hours.

There is no password recovery. Losing the full rendezvous link means losing access. Anyone with that link can read, post, and burn the station.

Privacy & data behavior

Messages are encrypted in your browser before storage. The backend receives ciphertext and derived authorization information, not the client-side decryption secret in the link's fragment.

The application uses no accounts, cookies, analytics, localStorage, or advertising. Cloudflare operates the hosting infrastructure and may process normal HTTP and network metadata, including IP addresses, hostnames, request times, and sizes. Waystation is not an anonymity service.

Stations expire automatically. Burning a station prevents future access through the application, but cannot erase copies already saved by recipients. Cleanup timing, provider backups, and infrastructure behavior mean deletion is not a promise of absolute erasure.

Security & trust

Waystation is experimental software, not an audited or certified secure communications product. You must trust the JavaScript delivered to your browser and the device running it; a compromised browser or application deployment could capture messages and keys.

Possession of the full link grants access. Participants are not authenticated people, and notes do not verify who wrote them. Share links privately and choose another tool when you need stronger assurances.