Not access control. Actual encryption.
The coordinates of Earth are the decryption key.

Decrypting_Locus...
40.7484°N, 73.9857°W
Precision: 1.2m // Status: Confirmed
// the problem //
Your event content lives forever online.
What if it could only exist at the venue?
Every "exclusive" digital experience gets screenshotted, forwarded, and posted within minutes. Geofencing checks a server — servers can be lied to. Access control asks permission — permissions can be shared.
Wormhole doesn’t check your location. It uses your location as the decryption key. The content is mathematically impossible to access from anywhere else on Earth.
// protocol //
Geofencing is an honor system. It asks a server if you’re there. Servers can be spoofed. URLs can be forwarded.
Wormhole derives a decryption key from your GPS coordinates using a cryptographic key derivation function. The content does not exist in decrypted form until the math is satisfied.
0
Server trust required
3.7mm
Minimum precision
Drop a pin on the map. Set your radius — from a city district to a single room. Every centimeter is configurable.
Interactive map with real-time radius visualization
Upload text, images, video, or files. Wormhole encrypts it using a key derived from those exact coordinates. No one else can reproduce this key.
GPS → Geohash → Morton Code → BLAKE3 KDF → XChaCha20
Share the QR code anywhere. When someone scans it at the right location, their phone derives the same key and decrypts the content. No server involved.
Decryption happens on-device. Coordinates never leave the phone.
// use cases //
Wormhole turns physical space into a content delivery mechanism. Here’s what people are building.
Lock menus, pricing, and exclusive product reveals to the venue floor. Customers scan inside the pop-up and see the full catalog. Everyone else sees nothing. Zero leaks, zero screenshots.
Build alternate reality games where each clue is encrypted at a physical location. Players can't datamine the source code or share solutions — the only way forward is to go there.
Cryptographic verification that someone was physically at a specific location at a specific time. Sponsors get real engagement data, not estimates. Every scan is a coordinate-stamped receipt.
Concert setlists that only unlock at the venue. Gallery exhibitions with commentary that exists only in the room. Conference sessions that live and die at the event.
// signals received //
From the people building location-locked experiences.
“I keep telling clients we can make digital content exclusive to a place, and then someone screenshots it in the first five minutes. Wormhole is the first tool where the content literally cannot decrypt outside the coordinates. The promise finally holds.”
Mara Voss
VP Creative, Experiential Agency
“I spent three weeks planting physical dead drops for my last ARG. Two got stolen, one got rained on. With Wormhole, each clue is encrypted with the coordinates of the next location. No server to hack. No source code to datamine. The puzzle is unbreakable.”
Dael Moreno
Indie ARG Designer, Independent
“My sponsor paid $80K for a branded activation zone and wanted real engagement data. With Wormhole, every scan is cryptographic proof that someone was physically there at that time. Not an estimate. Not a check-in button. Real coordinates, real timestamps.”
Tomas Eriksen
Digital Innovation Lead, Regional Tourism Authority
// competitive landscape //
We looked. Location-bound encryption does not exist in any competitor’s product. Not as a feature. Not as a beta. Not on any roadmap we can find.
Geofenced web pages
Server-side location check. Trivially spoofable. Content can be forwarded. Zero actual scarcity.
AR platforms
Require app installs or heavy WebXR. 60–70% audience drop-off before first interaction. No encryption.
QR-to-URL codes
Work from anywhere on Earth. The link is the experience. No location binding whatsoever.
The GPS coordinates are the decryption key. Not a server check. Not an API call. The math itself is the lock. You cannot spoof mathematics. You cannot forward a position on Earth.
Client-side decryption · Zero server trust · Works on any phone with GPS · No app install
// access tiers //
Your first 3 spatial codes are free. No credit card. Upgrade when your campaign needs more.
Up to 3 labels
Up to 25 labels
Unlimited labels
Unlimited labels
“The internet made everything available everywhere.
We thought: what if it didn’t have to be?”
3 free codes. No credit card. Ready in 90 seconds.