PostSecret: making 14,000 anonymous secrets searchable

The decision that was stuck

The situation

Frank Warren owns PostSecret outright. There is no board, no CTO and no technical staff to hand a question to, and after twenty years the archive had become roughly 14,000 images with no way to explore them. The authority to decide what happened next was entirely his. The basis for deciding was not there, and the stakes were unusually asymmetric: anonymity is the entire premise of the project, some submissions should never be public at all, and the obvious technical answer, load it into a database and add keyword search, would have flattened the work into a list.

What I decided

• Search runs three ways at once and blends into a single ranked list, rather than making a reader choose a mode. Most of the archive's meaning does not survive keyword matching.
• The platform is custom WordPress plugins on Automattic's Pressable, so a small team can operate it inside the tools it already uses instead of inheriting a bespoke stack from a volunteer.
• Moderation is a visibility gate inside the pipeline, not a step somebody remembers. New items arrive as "needs review" and are never public until vetted.
• Every change writes to an audit log, because an archive built on anonymity has to be able to answer what happened to a given card.

What shipped

Unified full-text, semantic and faceted search across roughly 14,000 secrets, with a query parser and a ranking method that blends the three into one result set. A classifier that tags every secret across six facets. Embeddings in a Qdrant vector database powering semantic search and the "similar secrets" surface. A cloud ingestion path with duplicate detection and front-and-back pairing. A severity-tiered moderation queue behind a single visibility gate. A schema-migration system for the custom data model, and the front end that surfaces all of it.

What is still open

I have not left this seat, so there is no closing account yet. What is open today: the archive keeps growing, which makes ingestion and moderation a standing operation rather than a one-time migration, and ranking quality across the three blended modes is still being measured against the search-evaluation tables rather than settled. This is volunteer work on a weekly cadence, which is the honest constraint on how fast any of that moves.

Overview

For twenty years, PostSecret has collected secrets that strangers mail in on homemade postcards. The collection grew into one of the most recognized community art projects on the internet, but it lived as images with no real way to explore it. The digital archive makes the whole body of work searchable while protecting the anonymity and sensitivity the project is built on.

• ~14,000 anonymous secrets brought into a single searchable archive
• Search that understands meaning: semantic, full-text, and faceted search merged into one ranked result set
• A classifier tags every secret by topic, feeling, meaning, style, location, and vibe
• A moderation pipeline keeps sensitive submissions out of public view by default
• Built on WordPress, hosted on Automattic's Pressable

The project

PostSecret's archive is unlike a normal content library. Every item is anonymous, emotionally charged, and submitted in trust. The design problem was to make two decades of that material explorable without ever flattening it into a generic database.

The archive and search

Search is the heart of the experience. A single query runs three ways at once and the results are blended into one ranked list, so a reader can search by exact words, by meaning, or by browsing facets, and still get one coherent answer.

The same engine powers "similar secrets" on the detail page and a faceted homepage feed that renders the archive in an editorial layout rather than a flat list.

Architecture

The platform is a set of custom WordPress plugins, chosen so the project lives natively inside Automattic's ecosystem and the Special Projects team can operate it without a bespoke stack.

Ingestion and moderation

Getting thousands of physical postcards into a clean, safe, searchable archive is its own pipeline, and moderation is a first-class part of it rather than an afterthought.

My role

I am the volunteer technical lead and primary engineer on the project, working directly with founder Frank Warren and Automattic's Special Projects team on a weekly cadence. I designed and built the platform's core systems end to end - the search stack, the classification pipeline, the content-moderation pipeline, the ingestion path, and the schema-migration system - and built the front-end that surfaces them. It is hosted on Automattic's Pressable.

Outcomes

Building something that has to handle sensitive content with care?

PostSecret is what happens when a beloved, deeply human project needs real infrastructure - meaning-based search, careful moderation, and a platform a small team can operate. If that is the kind of problem you are working on, let's talk.