Defend your digital footprint with mathematical immunity.
StealthRelay is a premium, enterprise-grade Zero-Trust Ephemeral Secret Sharing and Encrypted Anonymous Email Relay platform. Engineered for absolute digital sovereignty, it permanently shields identities using high-grade client-side browser cryptography and serverless dynamic relays routed globally through the Cloudflare Edge network.
| Feature | Technical Engine | Guarantee |
|---|---|---|
| Zero-Knowledge Ephemeral Seals | Local AES-256-GCM via Web Crypto API |
Keys reside in the URL hash fragment; never transmitted to servers. |
| Edge-Level Rate Limiting | Cloudflare D1 + Workers KV sliding window check | Prevents brute force scanning and volumetric resource abuse. |
| RAM-Only EXIF Bleaching | Client-side Canvas & Binary sanitization array | Complete metadata removal (GPS, camera specs, timestamps) before upload. |
| Inbound Masking Relays | Dynamic outbound email alias shielding | Sanitizes web-trackers and cookie beacons, forwarding clean payloads only. |
+-----------------------------------------------------------------+
| CLIENT BROWSER |
| |
| 1. Local RAM: Bleach Image EXIF (Canvas pixel redraft) |
| |
| 2. Generate local symmetric key: AES-256-GCM |
| |
| 3. Seal file/payload -> Ciphertext + IV |
| |
| 4. Generate dynamic link: |
| https://stealthrelay.io/read/[secret_id]#[aes_key] |
+---------------------------------+-------------------------------+
|
Payload (Ciphertext only - NO KEY)
v
+-----------------------------------------------------------------+
| CLOUDFLARE EDGE NETWORK |
| |
| 5. Validate rate limit dynamically via Cloudflare D1 |
| |
| 6. Store encrypted ciphertext globally inside Edge KV |
+-----------------------------------------------------------------+
All payloads, passwords, and file packets are locked in client-side volatile memory using standard AES-256-GCM encryption. The cryptographic key is strictly appended to the URL as a hash fragment (#key).
Note
Web browsers do not transmit hash fragments to servers during HTTP requests. The server stores only raw, unreadable ciphertext. Decryption is performed entirely inside the recipient's browser.
Unlike typical backends that process files post-upload, StealthRelay redrafts images inside the local client's browser using HTML5 Canvas pixel arrays. It strips:
- EXIF Geotags (GPS coordinates)
- Camera make, model, and serial numbers
- Creation dates and timezone trails
StealthRelay utilizes a sub-millisecond dynamic rate check built on Cloudflare D1 SQL bindings, protecting resource utilization securely without adding bulky database roundtrip latency.
- Node.js: v18.x or higher
- Package Manager:
npm(compatible withpnpm)
-
Clone & Enter the Repository:
git clone https://github.com/secrooq/StealthRelay.git cd StealthRelay -
Install Core Dependencies:
npm install
-
Launch the Development Server:
npm run dev
-
Verify Application: Open http://localhost:3000 inside your web browser.
To maintain mathematical verifiability of all zero-knowledge and cryptographic promises, this repository remains entirely open source under the GNU Affero General Public License v3 (AGPL-3.0).
StealthRelay — Defend your digital footprint with mathematical immunity.