Encrypted in your browser
Your album
Photos, videos, names, places, answers and search live only in this browser, encrypted with a key derived from your passphrase. Our server and the Ghost never have that key.
A private album, gathered quietly
The photos your family shares, kept as memories only you can open.
Message The Ghost on WhatsApp — or start a small group with it. It gathers the photos and videos shared after it joins, suggests memories, asks gentle questions, and hands everything to an album that is encrypted in your browser.
- 1Message the Ghost, or ask it to create a group (up to 8 people).
- 2It introduces itself and explains what it can and can't see.
- 3You approve exactly what may be processed. Others opt in for themselves.
- 4You receive a private link and create your album passphrase in the browser.
- 5Approved memories are encrypted on your device; our temporary copies are deleted.
Three kinds of information, never mixed silently
Scoped and expiring
What you share with the Ghost
When the Ghost needs a fact from your album — say, an event title — it asks. You see exactly what would be shared, for one purpose, and it expires.
Not zero-knowledge
What arrives through WhatsApp
Messages sent to the Ghost pass through WhatsApp and our server, which must process them. We keep encrypted temporary copies for as short as possible and delete them automatically.
What WhatsApp does not give the Ghost
WhatsApp doesn't let a business number join an existing family chat or read messages sent before it joined. Whisperboard begins with new messages. There is no chat-export import, by design.
Honest limits
While your album is unlocked, code running in this page can read it — including code from a compromised future version of this site or a browser extension. Install the app for offline use, lock it when you're done, and keep your passphrase safe: it cannot be recovered.
Privacy and retention details