City of Hats

City of Hats — Secure Channels with Live Auto-Translation

End-to-end encrypted communication built entirely in-house. No third-party dependencies. No metadata collection. No trust required. Now with live auto-translation in 50+ languages.

🌐 LIVE AUTO-TRANSLATION (NEW)
Receiver-side translation of every incoming message into your preferred language. 50+ languages in the picker, plus any ISO 639-1 code via the search box. End-to-end encryption stays intact — translation is processed transiently and never stored.

🔒 SECURE CHANNELS
Disposable Hat identities paired into encrypted two-way channels. X25519 + ML-KEM-768 hybrid key exchange, AES-256-GCM, Signal Double Ratchet forward secrecy. No message history stored on our servers — ever. No phone, email, or government ID required.

👥 PRIVATE GROUPS
End-to-end encrypted group chats with sender-key cryptography. Each member's translation language is independent. Free plan includes one creator-owned group (up to 10 members); Premium unlocks unlimited.

🖼️ TEASE & SHARE
Share an image with control: blur it, lock with a passphrase, restrict by location, set view-once or auto-expire. Send via link — recipients see a preview without installing. You stay in control after sending.

📦 DEAD DROPS
Encrypted self-destructing drops with time-lock expiry. Burn-after-read, limited retrievals, auto-destroy timers, time-locked delivery.

👻 GHOSTFRAME — STEGANOGRAPHY ★ PREMIUM
Hide AES-256-GCM encrypted messages inside ordinary images. Share through any platform — email, cloud, WhatsApp, LINE — the image looks completely ordinary. Only Premium can decrypt what's inside. Hybrid token architecture survives recompression. Lock to a specific Hat or open to any Premium recipient.

🎤 ECHODROP — VOICE RETRIEVAL ★ PREMIUM
Encrypted messages retrieved by speaking a secret passphrase. On-device voice processing — only a hash leaves the phone. PBKDF2 with 600,000+ iterations. Burn-after-read, retrieval limits, time-lock.

📨 SEALED TIPS
One-way anonymous intake for whistleblowers, journalists, and sources. No identity, no trace, no reply channel.

🛡️ CHECK SECURITY ASSISTANT
Built-in privacy intelligence chatbot. Look up email addresses, phone numbers, usernames, or domains for breach exposure and threat data — from inside an encrypted chat.

📞 ENCRYPTED CALLS
1:1 voice and video with end-to-end encryption and forward secrecy. No call records on our servers.

🚫 ZERO THIRD PARTIES
All cryptography, authentication, and infrastructure owned and operated by City of Hats. No AWS. No Firebase. No external auth. Passkey, Google, Apple, and native username sign-in.

🔐 POST-QUANTUM READY
Hybrid X25519 + ML-KEM-768 lattice cryptography. Protected against current and future quantum adversaries.

💎 CITY OF HATS PREMIUM
Unlocks: GhostFrame, EchoDrop, Resident Hat (persistent identity), unlimited groups, unlimited translation, longer-lasting Hats, priority support. Managed via Stripe.

✅ PRIVACY BY DESIGN
• Client-side AES-256-GCM for all message types
• Zero-knowledge — we cannot read your messages
• No metadata logging on our servers
• On-device voice processing for EchoDrop
• Burn-after-read with permanent server-side deletion
• No sender-recipient linking
• GDPR, PIPEDA, and Thailand PDPA aligned
• Public Warrant Canary for transparency

🛠️ SECURITY ARCHITECTURE
• X25519 + ML-KEM-768 hybrid key exchange
• Signal Double Ratchet forward secrecy
• AES-256-GCM authenticated encryption
• PBKDF2 voice passphrase derivation
• LSB steganography with hybrid token architecture
• SHA-256 hash-only server storage for passphrases
• Client-side tamper-evident crypto audit log

Built for journalists, legal teams, compliance departments, financial institutions, healthcare providers, international teams, multilingual families, and anyone who needs communication that leaves no trace.

https://cityofhats.com