$ plaintxt --roadmap

roadmap

what's shipped, what's being built, and what's planned. updated as things change.

// shipped

✓anonymous identities, no signup — yours until you burn them

✓E2EE messaging — ECDH P-256 + AES-256-GCM

✓real-time delivery via WebSocket

✓opt-in burn-after-read for power — 60s after reading

✓smart read detection — tab focus + 1.5s dwell

✓hard delete — cron-swept every 5 minutes

✓file and image attachments (up to 10 MB free)

✓block and report

✓Pro tier — multi-device, 200 MB attachments, 30-day identity

✓Power tier — 20 sessions, 1 GB attachments, 365-day identity, faster burn timers

✓multi-identity — up to 5 local identities (Power)

✓identity export / import — AES-256-GCM encrypted bundle (Power)

✓identity modes — standard / burner / persistent / hardened (Power)

✓inbox control — accept all or trusted contacts only (Power)

✓attachment burn-on-access — file deletes after first view (Power)

✓read receipt control — toggle on/off (Pro+)

✓recovery codes — restore paid access without re-subscribing (Pro+)

✓slash commands — 50+ internal commands, discoverable by typing /

✓theme system — 12 themes including light modes

// in progress

PWA support

install as a home screen app on iOS and Android

group conversations

temporary encrypted group threads, invite-only

voice messages

short audio clips, encrypted like text, same burn rules

// planned

○

Tor / .onion address

accessible via Tor Browser for higher-anonymity use cases

○

opt-in self-destruct on inactivity

choose to have your identity burn itself after N days of no activity — unused free identities are already reclaimed after 180 days

○

one-time link sharing

share a single-use link that opens a conversation, then stops working

○

API access (Power)

programmatic access for devs — create identities, send/receive messages

○

custom burn timers (Pro)

set per-conversation burn windows, not just per-tier defaults

// not on the roadmap

things we have considered and decided against:

✗ email / phone registration — defeats the anonymous model

✗ message history backup to cloud — we hold ciphertext we cannot read, not a backup service

✗ ad-supported free tier — ads require tracking

✗ social features (followers, profiles, public feeds) — wrong product

✗ read receipts on by default — opt-in only, Pro+