Secure Envelope
Location-gated E2EE

Deliver secrets only when the recipient is standing in the right place.

Secure Envelope binds every message to a Gobbo voxel - an Earth-sized 3D grid. Your friend can only read it when their device proves they're inside the mailbox you picked.

Pick a mailbox - Encrypt - Deliver

Sending
Gobbo Secure Mailbox LocationGBBBBBBAFEHEBFDBCGBFB
Ciphertext (XChaCha20-Poly1305)
9c0e3a...ff91
Opens only when the receiver's phone reports the same Gobbo voxel.
Tier 1Free

Free (Limited Use)

Try Gobbo-locked messaging with enough quota to build the habit before you upgrade.

  • - 50 total messages or emails each month
  • - File drops: 100 MB per month, 10 MB max per file, auto-delete after 7 days
  • - Gobbo unlock depth capped at one level (fast onboarding)
  • - Share links so friends can unlock and sign up
Start for free
Tier 2$4.99/mo

Premium (Unlimited Use)

Unlock the full Gobbo stack: infinite messaging, deep voxels, teams, and audit trails.

  • - Unlimited messages, email relays, and file drops (fair use: 50 GB stored)
  • - Full Gobbo depth (up to 60) with precise location safes
  • - Team invites, shared Gobbo mailboxes, and custom domains
  • - Audit logs plus priority support through email or Discord
  • - Annual option: $49.99 per year (save 17%)

End-to-end encryption

Messages encrypt on the client using X25519 + XChaCha20-Poly1305. The server only stores ciphertext.

Gobbo location lock

Location is quantized into Gobbo voxels. The ciphertext key is derived from the voxel code, so the wrong spot means the wrong key.

Web-first experience

Runs entirely in the browser with Clerk auth, Supabase storage, and libsodium for hardened crypto.

1

Sign in & publish your public key

2

Pick a Gobbo mailbox and encrypt

3

Recipient unlocks on location match

FAQ

Is this production-ready?

No—this MVP demonstrates the flow. Browser location can be spoofed and keys are stored locally without hardware attestation.

What about emails?

The same pipeline can wrap email bodies. Send an email with a deep link, and the web client unlocks when the recipient is on-site.