Why trust May·Secret?
Trusting your files to a service you don't know raises legitimate questions. Here are direct answers, without corporate spin.
Who publishes May·Secret?
May·Secret is published by May Software (French company registration SIRET 414 577 734 00042), a small French company run directly by Christian Meneux, who develops and maintains the service himself. This isn't a cloud multinational: it's a deliberate choice, one with an important consequence we'd rather state clearly than hide — see "What happens if May Software shuts down?" below.
All our legal details (registration number, legal representative, host) are public on the legal notice page. Got a question? Reach us via the contact page: you'll be talking directly to the person who wrote the code.
🇫🇷 Hosted in France
- Infrastructure: shared/dedicated servers at o2switch, a French host whose headquarters and data centers are located in Clermont-Ferrand.
- Data location: the database and encrypted files stay in France, on this same infrastructure — no data is replicated to a cloud outside the European Union.
- Backups: a daily backup (database + encrypted files) is automatically transferred to a second o2switch server, separate from the production server, with a rolling 5-day retention.
- Replication: no real-time multi-region replication at this stage — the daily backup to a separate server is the current protection against an outage or data loss on the main server.
Your files are encrypted in your browser, before being sent. The key that decrypts them is itself encrypted by your password and never leaves your device in any usable form: our servers only ever receive, store and transmit content that's already encrypted, and that they're technically unable to read.
This isn't a marketing promise: the algorithm used (XChaCha20-Poly1305 via libsodium, a widely audited open source cryptography library) and every step of the scheme are documented in detail on our security page.
What happens if May Software shuts down?
That's a legitimate question for a small company, and we'd rather answer it honestly than dodge it. We commit to:
- never blocking access to your data as long as your account is active;
- giving you reasonable advance notice if the service were to shut down, so you have time to retrieve your files;
- using a standard, documented encryption algorithm (XChaCha20-Poly1305 / libsodium) rather than a closed proprietary format — your decrypted files remain plain files, usable anywhere.
Can I easily get all my data back?
Yes, at any time, without contacting us. From your account page, an "Export my data" button downloads a file summarizing your profile and the list of all your files. Every file also remains individually downloadable and decryptable, as often as you like, from your vault.
An important point tied to the zero-knowledge design: this export can't replace your password. If you lose it, no one — not even us — can decrypt your files for you. Keep it in a password manager.
Ready to try it yourself?