How envelope encryption lets a community hold the only key to its own precise data — while the platform holds nothing it can read.
How the mechanism works
Step through the lifecycle. Watch what the platform holds at each stage — it never holds anything it can read.
Community side
(1.2345, 103.5678)
Platform database
—
Nothing uploaded yet
The community encrypts the precise coordinates on its own device. Plaintext becomes ciphertext before anything leaves.
1 / 5
One turtle, really encrypted
This runs real encryption in your browser. The precise track is encrypted locally, only the ciphertext is uploaded, and you can inspect exactly what the server stored. Revoke, and the stored copy can never be opened again.
