Sorry 😂 Thought I exempted the /anon route from headless, VPN and proxy checks but forgot one of the VPN functions, fixed now! The /anon route is not checked. It was unfortunately needed because of a very costly bot attack abusing a service I had.

Yeah, I appreciate the feedback. I need to do more, so the link isn't a secret, e.g. any password will decrypt any link to text so if you use the wrong password you get wrong data possibly a different link, that hides if you were wrong or right. Then you only need to share one secret via a separate channel.

Not that I'd use this service for it, but I've had use cases for this sort of thing. It's not so much about plausible deniability as OP wants to sell it as, but more about security. You send the locked link (or a PW protected file or whatever) via, say, email, and the password through a text message. Then, in order for the data to be stolen, the attacker would need access to both of those, rather than only one. It's niche, but I've needed to do it for my job before, so I can at least see the point.