# 1time.io privacy rating

One-time secret sharing service that encrypts text and files in the browser with AES-256-GCM before upload and deletes them after the first view or expiry. Also offers a CLI, a browser extension and self-hosting.

## Summary

1time.io scores 59 out of 100 (grade D) on the secret sharing criteria. It meets 3 of 8 criteria: open source, no trackers or telemetry and no ads or data sales. It partly meets TLS configuration and security headers. It does not meet independent audit, transparency report and tells users about requests. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade B+.

- Website: https://1time.io
- Source code: https://github.com/shingrus/1time.io
- License: MIT
- Home page trackers: none found
- Category: [Secret sharing](https://privacyratings.com/secret-sharing/)
- Grade: D (59/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MIT. | https://github.com/shingrus/1time.io/blob/master/LICENSE |
| No trackers or telemetry | Yes | The privacy policy states no cookies, analytics, tracking scripts or third-party requests. | https://1time.io/privacy/ |
| No ads or data sales | Yes | Free service without ads. The privacy policy states no ad networks and no personal data collection. | https://1time.io/privacy/ |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Partial | Grade B | https://www.ssllabs.com/ssltest/analyze.html?d=1time.io&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=1time.io |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/secret-sharing/1time-io/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/secret-sharing/1time-io.md