Show HN: SecretGate – self-hosted anonymous inbox, E2E encrypted in the browser

SecretGate is a self-hosted, browser-based anonymous inbox that creates a unique private link anyone can use to send encrypted messages without signup or identity. Messages are end-to-end encrypted in the browser and the inbox (called a box) is stored on the user’s device; a Secret Code is required to open it and is never stored in plain text on the server. A separate Recovery Code lets users restore their box on another device, but without that code messages cannot be decrypted. The interface supports copying/sharing the secret link, sending anonymous "whispers," terminating links, and displays status such as expired or deleted links.

Operational specifics include configurable auto-delete timers for new messages and for the entire box if the owner does not check in within a chosen period, with checking the inbox resetting that timer. Users can choose to remember a trusted device to skip repeated code entry. The design enforces a zero-knowledge model: keys and decryption happen client-side, so the host cannot read contents, while loss of the Secret or Recovery Code is irreversible. The product emphasizes ephemeral, privacy-first communication with clear recovery and deletion controls, plus standard legal notices like Privacy Policy and Terms.