Privacy

Locket is operated by Akhil Mathew. It does not ask for an email or an account. You open a chat with a shared key of at least 18 characters.

Messages, photos, voice notes, clips and files are encrypted in your browser with AES-256-GCM before they are stored. The server keeps the encrypted data and who is present. It does not receive the line key, and the desk cannot open messages. This is not the Signal protocol. Anyone who has the key can read that chat.

The key is sealed on this phone. A lost key cannot be restored. A short or obvious key is easier to guess. A private line seats two people. A group key seats up to eight.

Closing a chat deletes its encrypted messages and files from Locket. There is no separate backup. The site may load a Grok app-builder script used to publish the app. Locket does not run its own analytics.

Questions and deletion requests: akhilmathewuk@gmail.com.