Private messaging without a phone number
Veto is an extreme-privacy messenger: local identity, keys on the device, end-to-end encryption and relays that only see ciphertext. We built the trilingual site and the /app PWA, released as an honest public alpha.
Veto is an extreme-privacy messenger: identity is local, with no phone number, and messages are end-to-end encrypted. We built its trilingual marketing site and the /app PWA, with multi-relay delivery where relays and operators only see ciphertext. It is out as a public alpha and says so on the front page: no production release before an external crypto audit.
- Client
- Veto · Private messenger
- Sector
- Privacy and messaging
- Deliverables
- Trilingual marketing site
- PWA at /app
- Local identity creation
- E2E multi-relay architecture
- Documented readiness gates
Nobody in the middle reads the messages
The brief for Veto was strict. Scanners, relays and operators should never see plaintext, and nobody should need a phone number or an SMS to join. The security claims also had to be honest: a privacy product that overstates its protection breaks the trust it asks for. The project needed a real product and a clear statement of where it stands.
Identity on the device, ciphertext on the relays
We built the /app PWA around one flow. A user creates an identity locally, with no phone number, and the keys stay on the device. A PIN locks the local vault. Each message is encrypted end to end before it leaves the device, then travels through several relays, which, like the operators, only handle ciphertext. The trilingual marketing site presents the product and its security model, and the readiness gates that decide when Veto can ship are documented.
-
01
No phone number
Joining Veto takes no phone number and no mandatory SMS: the identity is local and the keys live on the device.
-
02
End-to-end, multi-relay
Messages are end-to-end encrypted, then delivered through several relays. Relays and operators only ever see ciphertext, never the plaintext.
-
03
PIN-protected vault
The local vault is protected by a PIN: what Veto keeps on the device stays locked until the PIN is entered.
-
04
Documented readiness gates
Release criteria are written down. The site says it plainly: public alpha, not production-audited, no-go for release until an external crypto audit.
The project in pictures
1 images · Open any image to see it full size.
An honest alpha, ready for a crypto audit
Veto is live as a public alpha with a real interface: the marketing site in three languages and the PWA at /app. The privacy narrative is clear and the security claims are honest. The base is ready for an external crypto audit, and the site keeps release readiness at no-go until that audit has taken place.
- Public alpha: trilingual site and a real app interface
- Relays and operators see ciphertext only, never plaintext
- No phone number and no mandatory SMS to join
- Base ready for an external crypto audit
Cases close to this one
Read more
Enviable AI · AI portraits
Aspirational portraits generated by AI
GenAI product that turns a portrait into a professional aspirational image: fast mobile flow, scene templates, credit-based monetization and a privacy-first architecture aligned with GDPR.
Learn more →
Read more
Paperslate · E-Ink + AI
E-Ink notebook with AI retranscription
Paperslate product: digital paper tablet with real writing feel (Pro and standard models) and a GenAI layer that retranscribes handwriting, formulas and diagrams to Word or PDF.
Learn more →
Read more
Peoplesnap
From smartphone to DOOH mosaic, without a single booth
Peoplesnap is Slash Experience's photobooth product: a white-label web app that turns each guest's phone into the activation. QR, selfie, AI editing (100+ parameters), social share, print and mosaics on event screens. Already live for Mouton Cadet, La French Tech Bordeaux, CEA Marcoule, Denver Pub Crawl, With Agency, We Love Beer and CES Las Vegas 2024.
Learn more →Let's put it in production
Tell us your challenge. We reply within 24 business hours with an honest first read: if we can help, we'll say how; if not, we'll say who can.
I reply personally. No endless forms, no canned replies.