Story
Night before the crossinga checkpoint
I’m a freelancer, nTilia Pro. Three weeks of interviews in a place where, on the way out, phones get searched — a border post or a makeshift checkpoint, you never know early enough. Léa, at the desk, already has the encrypted file. Tomorrow morning I’ll be in the line.
They can open everything: nTilia, Signal, the camera roll. What they should find on my phone: a hotel contact, a permit. What they should no longer find: the names. You don’t improvise that at the barrier. You prepare it before you leave.
A fictional story. No country, no armed force named. nTilia does not wipe the phone: Signal, photos, maps, and already-downloaded ZIPs remain searchable. IndexedDB is not a forensic wipe.
What I’m about to tell you
01
Still at the desk
I name her nTilia account. Whenever the notebook changes, an encrypted snapshot reaches her — she opens it with her vault, I open it with my phrase. This is not a ZIP in Files — that one they’d find in my pocket.
02
In the line
A hotel note, a permit. Not the interviews. Signal, photos, maps: nTilia did not touch those. I took care of that myself.
03
Two days later
I open it with the vault phrase. The account password is not enough. The same notes come back.
D−7 · still at the desk
Three weeks before I come back, I’m still at the desk. I don’t wait for the barrier. I create two Missions.
“Logistics”: the hotel at the crossroads, public contacts, the permit. I check it: that one, I take with me. “Sources”: the interviews, the names. Unchecked. In Settings I type Léa’s nTilia account, at the desk. From the first sync, an encrypted file reaches her; her vault opens it, she can read at the desk without waiting for me. Burn can empty my cloud; her copy, no. I do not tap “Prepare to leave”: that ZIP would sit in Files, still searchable. That’s for a network outage. Not for a checkpoint.
The scoop survives if it has already left the phone.
Last hour · still out of sight
It’s still dark. Nobody on the track. This is now, not at the barrier.
There’s still a network: I turn on Travel Mode. Notes outside logistics leave this device. The vault locks. If there were no network, I’d share a .ntilia with a colleague who isn’t crossing — then confirm the file is no longer here, before I purge. A ZIP in Downloads is still the scoop in a pocket. I also clear Signal, the camera roll, the maps. nTilia will not do that for me.
What’s left is the hotel. The rest is no longer here.
Dawn · the line
The line isn’t moving. They take my phone. They open nTilia. A hotel contact, a permit. Not the names.
The journal I’d already published stays online — yesterday’s piece isn’t a secret. Signal, the camera roll, maps, a ZIP forgotten in Files: nTilia didn’t touch those. This is not a factory reset. It’s an empty notebook, not a new phone. They close it. I go through.
nTilia is not the phone.
The other line · too late to evacuate
A colleague called me once: too late to send the drop. The rule is where the last copy is.
If Léa already has it, or a .ntilia is already off me: Burn. Phone and private cloud empty; her copy, intact. If I only have this account’s nTilia cloud: Empty, not Burn — otherwise I also kill the copy I can restore somewhere safe. If nothing left me: choose. The scoop on the device, or an empty device. nTilia does not do both.
Without a copy off me, Burn kills the scoop.
Somewhere safe · two days later
A room, Wi-Fi, the other side of the barrier. Léa sends me the .ntilia. I open it with the vault phrase — the account password is not enough, and that phrase was not on the phone.
The same notes come back, then I push to an empty cloud. The already-public journal was not burned. What doesn’t come back: local version history, the glossary. The story is there.
The copy that mattered was already with Léa.
If the checkpoint comes too soon
Burn. Phone and private cloud empty. Her copy is not destroyed.
Empty, don’t burn. The cloud stays. Somewhere safe: Restore. Burn would also kill the copy I can get back.
Choose: the scoop on the device, or an empty device. nTilia does not do both.
What I no longer mix up
Sync + ZIP on this device. For a network outage. The opposite of a checkpoint: the file stays searchable.
Sensitive notes leave the device. Logistics can stay. The off-body copy is already with Léa. From Pro.
Last resort in the line. Empty leaves the cloud. Burn destroys it — not the drop with Léa.
People ask me
The move
I don’t disguise a notebook. I take it off the device that will be searched, because a copy this account cannot destroy already exists — with Léa.
Travel Mode and safe recipient: from Pro. Empty / Burn, writing and capturing: free.
No credit card. nTilia is not the whole phone.