$ plaintxt --roadmap

roadmap

what's shipped, what's being built, and what's planned. updated as things change.


// shipped

anonymous temporary identities (no signup)
E2EE messaging — ECDH P-256 + AES-256-GCM
real-time delivery via WebSocket
burn-on-read — 60s after reading, 24h if unread
smart read detection — tab focus + 1.5s dwell
hard delete — cron-swept every 5 minutes
file and image attachments (up to 10 MB free)
block and report
Pro tier — multi-device, 200 MB attachments, 30-day identity
Power tier — 20 sessions, 1 GB attachments, 365-day identity, faster burn timers
multi-identity — up to 5 local identities (Power)
identity export / import — AES-256-GCM encrypted bundle (Power)
identity modes — standard / burner / persistent / hardened (Power)
inbox control — accept all or trusted contacts only (Power)
attachment burn-on-access — file deletes after first view (Power)
read receipt control — toggle on/off (Pro+)
recovery codes — restore paid access without re-subscribing (Pro+)
slash commands — 50+ internal commands, discoverable by typing /
theme system — 12 themes including light modes

// in progress

~
PWA support
install as a home screen app on iOS and Android
~
group conversations
temporary encrypted group threads, invite-only
~
voice messages
short audio clips, encrypted like text, same burn rules

// planned

Tor / .onion address
accessible via Tor Browser for higher-anonymity use cases
self-destruct on inactivity
identity burns automatically after N days without any activity
disappearing link sharing
share a one-time link that creates a conversation, then expires
API access (Power)
programmatic access for devs — create identities, send/receive messages
custom burn timers (Pro)
set per-conversation burn windows, not just per-tier defaults

// not on the roadmap

things we have considered and decided against:

email / phone registration — defeats the anonymous model

message history backup to cloud — messages should disappear

ad-supported free tier — ads require tracking

social features (followers, profiles, public feeds) — wrong product

read receipts on by default — opt-in only, Pro+