Most "privacy" tools mean "we promise not to look." ScorchPad makes it structurally impossible. Your browser encrypts text locally. The key lives in the URL fragment — never sent in HTTP requests. The server never sees it. We cannot read your pastes, comply with data requests, or identify you by IP. — Burn-after-reading: atomic, race-condition proof — AES-256-GCM + PBKDF2-SHA256 (310,000 iterations) — Monthly warrant canary — Fully open source Built by Rsaat Labs 🔒