Encrypted tip submission with journalist receipt proofs. Client-side only. No accounts. No tracking. Fully self-contained, no network dependencies.
Select relays to publish the gift wrap. If the journalist has a kind-10050 DM relay list, those are used instead.
Save this bundle before submitting. It is the only way to verify your receipt later.
Proves: The holder of the journalist's private key signed a receipt stating they received a tip whose content hash matches yours. The gift wrap hides your identity from relays and passive observers.
Does not prove: That the journalist is who they claim to be — verify their npub out-of-band. That an adversary controlling all your relays cannot correlate timing. That a compromised journalist key cannot forge receipts. That your messages have forward secrecy or post-compromise security (NIP-44 v2 provides neither).
For high-risk sources: This app is a starting point, not a final answer.