No audience
No feed, followers, likes, search, trending page, or public profile.
Send a letter into the quiet and let a stranger find it.
Orifude is a one-to-one letter exchange that lives entirely in your terminal. Write once. The post office carries it to one unrelated stranger, who may send one reply.
Private alpha. Online access remains invite-only.
A real letter, carried once
Shipped TUI. Synthetic local post office. No browser imitation.
Read the terminal journey
- Sora creates a local demonstration identity.
- Sora writes, previews, folds, and releases a letter.
- A waiting letter from Mori is claimed and explicitly unfolded.
- Sora writes the one allowed reply and keeps the exchange.
One letter. One stranger. One reply.
- WriteCompose in the terminal.
- Fold and releasePreview it, then let it go.
- UnfoldOne unrelated recipient opens it.
- Keep one replyOne answer closes the exchange.
A small exchange, deliberately kept small
Orifude removes the machinery that turns private expression into public performance. Those omissions are the product.
No recipient picker
The server assigns one eligible stranger. The sender cannot browse people.
No endless thread
A reply cannot receive another reply. The exchange closes cleanly.
No browser client
This website explains and distributes Orifude. Letters stay in the TUI.
Privacy without a fairy tale
The design limits who can read a letter and what strangers learn about each other. It does not pretend the service is invisible.
What is protected
- PostgreSQL stores application-encrypted correspondence.
- Only the matched participants can request an ordinary message.
- Aliases are non-searchable and reveal no profile or history.
- This static website has no letter API, account state, or analytics.
What remains visible
- Orifude is not end-to-end encrypted.
- The authorized post office can decrypt ordinary messages.
- The service retains operational metadata and participant relationships.
- A compromised running service is outside storage-encryption protection.
Take the branch with you
Orifude v0.2.0 is being prepared for Linux, macOS, and Windows on amd64 and arm64. Every archive will ship with a SHA-256 checksum.
The v0.2.0 archives are being prepared.
The links will appear only after all six artifacts and their checksums have been published and verified.
POSIX shell
curl -fsSLo install-orifude.sh https://orifude.com/install.sh
less install-orifude.sh
sh install-orifude.sh --version 0.2.0PowerShell
Invoke-WebRequest https://orifude.com/install.ps1 -OutFile install-orifude.ps1
Get-Content .\install-orifude.ps1
.\install-orifude.ps1 -Version 0.2.0Package managers
brew install nuggocto/tap/orifude
scoop bucket add nuggocto https://github.com/nuggocto/scoop-bucket
scoop install nuggocto/orifude
paru -S orifude-binBefore you unfold it
Is Orifude anonymous?
It is pseudonymous. A matched stranger sees your immutable alias. The service still sees operational metadata and the relationship between the two identities.
Is it end-to-end encrypted?
No. Correspondence is encrypted in storage, but the authorized post office decrypts messages for delivery and separately handles reported evidence.
Can I choose who receives my letter?
No. The post office assigns one unrelated eligible recipient. There is no user search or direct-message system.
Why is online access invite-only?
The online service is still a private alpha. The downloadable TUI and its checksums can be public before open registration is ready.
What if I lose my device?
The device key cannot be recovered. The separate revocation credential shown during identity creation can only delete the lost identity.