End-to-end encrypted by default

One HTTP request.
Encrypted. Delivered.

Prelay is a self-hostable, end-to-end encrypted notification relay. Send a notification from any script, CI job, or app — and have it land on your phone, readable only by you.

A notification travelslive demo
Your app
Prelay
Push network
Your phone

Your app sends one HTTP request

Notifications, but private

The simplicity of a webhook. The privacy of end-to-end encryption.

End-to-end encrypted

Contents are encrypted before leaving the trusted boundary and decrypted only on your device. The relay never sees plaintext.

One HTTP request

curl, bash, Python, CI, monitoring — anything that speaks HTTP can send. No SDK required to start.

Self-host first

Run your own relay in minutes with Docker. Own the infrastructure, the data, and the policy.

Zero-knowledge cloud

Use Prelay Cloud and the server still can't read your notifications. Privacy isn't a paid tier — it's the default.

No data, no history

No message history, no analytics, no profiling. Delivery records expire. Minimal data by design.

Works everywhere

Deployments, backups, uptime alerts, home automation, scripts. One relay for everything that pings you.

Simple enough for a cron job

No SDKs to learn. No vendor lock-in. One request in, one notification out.

HTTP API
curl -X POST https://prelay.example.com/v1/notify \
  -H "Authorization: Bearer $PRELAY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "title": "Deployment failed",
    "message": "Production deployment failed.",
    "priority": "high"
  }'
prelay CLI
# encrypted locally — the server never sees the contents
prelay send --encrypted --device phone \
  --title "Backup complete" \
  --message "Nightly backup finished at 03:00"

How it works

01

Register a device

Install the app, point it at your server, and a keypair is generated on-device. The private key never leaves.

02

Send a request

Any HTTP client posts a notification. The relay encrypts it to your device's public key (or your tool encrypts first).

03

Decrypt on-device

The app decrypts locally and shows the notification. The push network — and anyone in between — sees only ciphertext.

Your relay, your choice

Same core, same protocol, same app. Pick where it runs.

Self-hosted

Open source and free, forever. Run it on a VPS, a NAS, or your homelab with Docker.

  • Full control of infrastructure
  • No third-party dependencies for the control plane
  • Your Firebase project, your policy
  • Deliberately small — not a trial
Prelay Cloud

Hosted

Zero maintenance. Zero knowledge. The cloud server cannot read your notifications either.

  • Zero-knowledge by design — even we can't read it
  • Managed, reliable delivery
  • Same app, same API — no rewrite to move
  • Simple volume-based plans

Pricing

Simple plans, serious privacy

Self-hosted stays free forever. Prelay Cloud starts with a 14-day Pro trial — no card required.

2 months free

Solo

For personal projects

$5/mo
  • 5 devices
  • 2,500 notifications / month
  • 1 dashboard seat
  • Zero-knowledge encryption
  • prelay CLI + SDKs
Start with Solo
Most popular

Pro

Power users & side projects

$12/mo
  • 15 devices
  • 30,000 notifications / month
  • 3 dashboard seats
  • Zero-knowledge encryption
  • prelay CLI + SDKs
  • Priority support
Start with Pro

Team

Small teams & startups

$30/mo
  • 50 devices
  • 150,000 notifications / month
  • 8 dashboard seats
  • Zero-knowledge encryption
  • prelay CLI + SDKs
  • Team member invites
Start with Team

End-to-end encryption on every plan — security is never a paid add-on.

Get your first encrypted notification

Deploy in minutes, or join the waitlist for Prelay Cloud.