Hey HN,
I built SaecretHeaven because I was frustrated that every cloud photo service can see my images. Google scans for content, Apple has master keys, and most services store unencrypted.
SaecretHeaven is different:
• *True zero-knowledge*: Photos are encrypted client-side with XSalsa20-Poly1305 before upload. The server only sees encrypted blobs.
• *Decentralized storage*: Encrypted files go to IPFS with Pinata pinning across multiple EU nodes. No single point of failure.
• *Key anchoring*: Your 12-word recovery phrase derives your encryption key via Argon2id. We never see it.
• *Works offline*: Full PWA with local-first architecture. Desktop apps via Tauri.
Tech: Next.js 14, Better Auth, Supabase (metadata only), IPFS/Pinata
The beta opens Feb 3rd with 30 spots. Would love feedback from the HN community on the security model.
Site: https://saecretheaven.com
Happy to answer any questions about the architecture!
No comments yet.