MemoDueFAQ
DevnetDevnet only. The AES key lives only in the link fragment (#k=...). Never put it on chain. A lost link cannot be recovered.
1. What does MemoDue guarantee?
Nobody can read a note before its unlock time, including you. Your browser encrypts it and time-locks the key to a drand quicknet round (tlock). Only ciphertext goes on chain.
- The key lives only in the link's
#k=fragment, never sent to servers. After unlock, anyone with the full link can read the note. A lost link cannot be recovered. - The length is public. Pad text if size matters.
- Devnet test software: no real secrets or money. See Reference.
2. How do I read a note?
Open the reader link. It counts down, then decrypts in your browser. No wallet, no fee.
Gated (Arcium, ICP, Lit): unlock and expiry follow the Solana clock (Clock sysvar unix_timestamp), not your device. It can lag a few seconds (more on devnet); gates apply no grace. The site waits a 5 s margin and shows “unlocks in about X”. If refused as before unlock, wait and tap again — nothing signed or paid. Drand content opens on its round, independent of that clock.
After close, the reader rebuilds the note from create transactions if the RPC still has that history.
3. What does it cost, and what comes back?
- Create fee
- 0.01 SOL now (at most 1 SOL). Never refunded.
- Rent deposit
- About 0.003 SOL for a short note, about 0.024 SOL at the 4096-byte cap. Returned on close.
- Close tip
- 0.00001 SOL by default, from the rent, only when someone else closes.
- Network fee
- 5,000 lamports per signature.
Why rent? Each note is a Solana account with a storage deposit. With the create fee, spam cost real SOL.
4. What happens after unlock?
Sealed → Unlocked → Closed
- Sealed
- Before unlock. Nobody can read or close it.
- Unlocked
- Anyone with the link can read it. You, the creator, can close it any time for all the rent. After unlock + grace (15 min by default), anyone may close it for the tip; the rest still goes to you.
- Closed
- Account gone; rent paid out. The link still reads from history.
Close is the only action. Notes never close themselves.
Your reclaim link (reclaim.html?account=…, no key): one button, Close and get rent back.
Grace gives you the first chance at the full rent.
Due notes lists notes anyone may close (Close and claim tip).
5. What can I lock, and how big?
Up to 4096 bytes of text (about 600–900 words). Not files.
For a big file, encrypt elsewhere and seal a manifest (location, hash, key). Never put a raw key in a URL query.
6. What are Tier 1 and Tier 2?
Every new note goes through a gate. Plain is retired for new notes, for everyone; old Plain notes still read here.
- Tier 1 — short notes via a gate. Website and agent default: Arcium (can deny reads after a takedown). Lit only for agents that already have a Lit account.
- Tier 2 — longer notes via ICP when deployed.
Arcium reads ask Phantom for two approvals: unlock the key (fee plus a refundable deposit), then get the deposit back. Separate sent transactions let the wallet show each balance change.
Tier 1 caps unlock at 24 h and expiry at 48 h after create (Solana clock), limiting exposure to newer gate providers. Older providers have more history, but not a guarantee of uptime or permanence.
Reference
- Keep on chain forever (close lock): retired for new notes. Older locked notes can never be closed.
- Unfinished upload: a never-finished write is unreadable. You can close it any time; others from unlock + 24 h.
- Opened flag:
openverifies the drand signature on chain. Reading and closing do not need it. - Versions: new notes are v5, with tip and grace fixed at create. v3 follows the live settings; v1–v2 are legacy (agent page).
- Tip and grace: fee authority (Authority): tip ≤ 0.0001 SOL, grace ≤ 30 days.
- Owner change: fee authority proposes; no change until accept.
- Sanctions screening: OFAC SDN (bundled list) before create, close or treasury txs. A match is refused and nothing is sent.
- On-chain blocklist (next upgrade): flagged wallets cannot create or keeper-close; rent owed to them stays frozen in the note (not taken) until cleared. See Compliance.
- Keepers: anyone may run
scripts/keeper.mjsfor tips. None is running now. - Trust: the page script reads
#k=, so you trust the site serving it. tlock trusts drand. The create fee can change; your wallet shows it before you sign. Note length is public. Devnet only. - Official address:
devnet.memodue.com(backupmemodue-devnet.onrender.com). Copies elsewhere can steal keys (contacts). - Blocked notes: we may block a reported note on this site. That blocks our front end only, not the chain (terms).
Pages: create, Uses, Due notes, Authority, Compliance, agent, terms.