In Development

Ghost Paper
Vending Machine

Sell encrypted plain text via Lightning.
No accounts. No custody. Automatic delivery.

A dead drop protocol for text: encrypted content sits on the server until payment unlocks it. The payment preimage is the decryption key. Currently text-only. File support in roadmap.

How It Works

📝

Compose

Paste or type plain text in browser. Client-side AES-256-GCM encryption using ephemeral key. Server receives only ciphertext.

Set Price

Generate Lightning invoice. Payment hash locks the content. Settle in sats. Minimum 1000 sats recommended to cover routing.

🔗

Share Link

Buyer receives unique URL. No registration. Link is bearer instrument—whoever holds it can settle and decrypt.

🔓

Decrypt

Payment preimage reveals decryption key. Browser decrypts text client-side. Content deletes from server after access or expiry (24h default).

Current Capabilities

📄

Plain Text Vending

Encrypt and sell written content: essays, code snippets, configuration data, contact information, or private messages. UTF-8 support. 50KB max per drop.

🔑

Credential Drops

Sell API keys, seed phrases (encrypted), passwords, or access codes. Time-bomb links expire after first view or 24 hours.

💻

Source Code

Vend scripts, configuration templates, or command sequences. Syntax preserved in encrypted payload. Buyer copies decrypted text directly.

Roadmap: File Support

Future expansion beyond text to binary content.

📚

Digital Publishing

PDF ebooks, research papers, technical guides. Planned: Browser-based streaming decryption for large files.

🎵

Audio & Scores

High-resolution stems, sheet music PDFs, field recordings. Planned: Encrypted blob storage with chunked delivery.

🖼️

Images & Assets

High-res photography packs, 3D models, design assets. Planned: Client-side decryption with download rather than display.

📊

Confidential Reports

Financial analysis, security audits, proprietary data. Planned: Any file type up to 100MB.

Technical Specifications

🔐

Encryption

AES-256-GCM via WebCrypto API. Ephemeral keys generated in browser. Server holds only ciphertext and payment hash.

Lightning Integration

BOLT11 invoices. Preimage-derived decryption. Supports standard LN wallets. No custodial account required.

🧅

Network Stack

Clearnet and Tor onion service. Same API endpoints. No IP logging. No referrer tracking.

👻

Zero-Account

No user database. No emails. Sellers identified by LNURL or static Lightning address. Payouts direct to node.

🤖

API

REST endpoints for text upload, invoice generation, and status checks. JSON responses. HMAC authentication optional.

🧹

Data Retention

Auto-shred after successful decryption or 24-hour timeout. No backups. Plausible deniability for server operators.

Beta Access

Request access to test vending beta: coming soon.