Skip to content
Bondline

Welcome to Bondline

Put weight behind your promises. Your passkey opens your account with Face ID, Touch ID, or your device lock.

Creates a new passkey and a new account.

Already have a Bondline passkey?

Use an existing wallet

Choose your browser wallet. It will ask to connect to Monad Testnet.

By continuing, you agree to the Terms and acknowledge the Privacy notice. Use the same passkey and domain to return to your account.

Explore Bondline

Trust

Private journal

Personal reflections encrypted with the same Mera passkey, using a separate PRF-derived encryption key.

Updated October 14, 2026

On this page

Write privately

Open Private journal from your account menu or Settings. Passkey accounts can create a journal, add reflections, edit or delete entries, and encrypt and save them. Browser-wallet accounts continue to use Circles and commitments; this journal requires Mera’s passkey PRF.

You can privately associate a reflection with one of your commitments. The commitment ID and deployment address are encrypted with the note, so saved references do not silently change when a deployment changes. Nothing in a journal is posted to Circle chat, commitment evidence, or the blockchain. No gas is needed. Unsaved changes stay in the current page’s memory; save before navigating away.

Open your journal ↗

Encryption and storage

Bondline uses Mera’s createSecretVaultWithExistingPasskey and decryptSecretVaultWithPasskey APIs. Each save uses a fresh random 32-byte PRF salt and a fresh 12-byte AES-GCM nonce. Mera derives a non-extractable AES-256-GCM key with HKDF-SHA-256 and its encryption-specific info string, distinct from the wallet signing derivation.

Only the encrypted vault is stored in browser storage. Titles, text, optional commitment references, and entry timestamps are inside the ciphertext. Backup metadata includes the account address, chain ID, passkey domain, credential identifier, salt, and nonce. Plaintext is held in memory while open; an unlocked page, compromised device, or malicious application script could access it. This is encryption at rest, not a claim of an audited end-to-end privacy system.

Lock and recover

Saved notes lock when this page is hidden. Unsaved edits stay open so changing tabs does not silently destroy a draft; explicitly lock to discard them. Signing out or changing accounts clears the open journal.

Export an encrypted backup after saving. Import on the same passkey domain, network, and account; the original passkey must still be available. Import decrypts and validates the file before replacing saved data. There is no custody backend, automatic cloud backup, reset service, or recovery phrase. Losing the passkey can make notes permanently unreadable. Clearing browser storage without a backup deletes this device’s journal.

Limits and tests

The journal supports up to 100 reflections, 120-character titles, and 8,000-character bodies. Backups are bounded to 2 MB. Tests exercise the real Mera vault APIs using an isolated authenticator fixture: encryption/restore, fresh salts and nonces, tamper rejection, credential binding, account/network/domain boundaries, and malformed entries. Actual biometric and multi-device recovery must still be checked on the devices you intend to use.