A chatroom that forgets.
Blip is a private chatroom that lives in a browser tab. No account, phone number or email. Open a quant-room, share it, talk. When the timer runs out, the room is closed and its data is deleted.
Blip at a glance
| Identity | None. A random alias like Guest-482 per room. |
| Quant-Room | 1–10 minutes (your choice), 2 people, text. Free. |
| Super Quant-Room | 5 minutes to 7 days (your choice), up to 10 people, files up to 2 MB. If a $BLIP contract is configured, creators must hold at least $50 of it. |
| Ending a room | Anyone in the room can end it for everyone at any time. It is refused immediately, then deleted. |
| Joining | An invite link plus a four-word phrase. You need both. |
| Encryption | In your browser: XChaCha20-Poly1305 (libsodium), signed with Ed25519. Not post-quantum. |
| Transport | Messages go through Blip's servers and Supabase Realtime as ciphertext. |
| Storage | Encrypted messages and files are stored until the room is deleted. |
Protocol
- The invite link carries a random 256-bit secret in the URL fragment. Browsers never send fragments to servers.
- The four-word phrase is stretched with Argon2id. The room key is derived from the link secret and the phrase together, so neither alone can decrypt.
- The server stores only a hash of a phrase-derived admission token. It never holds a key.
- Each message is encrypted with the room key and signed by the sender's own key. Receivers verify both.
- Each file gets its own random key. The file is encrypted in your browser; the key travels only inside the encrypted message.
Holder check (Super Quant-Room)
- Supported: Phantom, Solflare, Jupiter, Trust Wallet, MetaMask (with Solana) and other Wallet Standard wallets. You connect a Solana wallet and sign a plain text message. That proves you control the address. It is not a transaction and grants no spending access.
- The server uses your public address once to read your token balance and the token price, then forgets it. It isn't stored or tied to the room it unlocks.
- Your wallet provider, our RPC provider and DexScreener can see the lookup. Blip never asks for your seed phrase or any approval.
What Blip can't do
- Anyone with both the link and the phrase can join and read. Share them through different channels.
- Recipients can screenshot or copy anything. Expiry can't erase that.
- Hosting providers can see connection metadata such as IP addresses. Blip doesn't store raw IPs.
- Expired rooms are refused immediately. Physical deletion happens shortly after, and provider backups may retain data briefly.
- There is no replay protection beyond de-duplication, and no key rotation yet.