Privacy Policy

Last updated: July 2026

Short version: we can't leak, sell, or hand over data we never collected in the first place. Here's exactly what that means.

What we store

Nothing, permanently. Room codes, participant counts, and message content exist only in server memory for as long as a room is active. There is no database. When both people leave a room, it and everything in it is deleted from memory — there is nothing left to request, breach, subpoena, or restore.

What we can technically see

Message content is end-to-end encrypted — the full technical design is documented in this project's SECURITY.md file for anyone who wants to verify the claim rather than take it on faith. In short: your messages are encrypted on your device before they're sent, and our server only ever relays ciphertext it cannot read. We do briefly see, in transit, metadata that isn't practical to encrypt: your IP address (used only for basic rate limiting, never stored beyond a short in-memory counter), display names, and connection timing (when a room was created, when someone joined or left).

What we log

Operational logs (room created, participant joined/left, errors) that never include message content or full display names beyond what's needed to describe a connection event. These logs exist only for debugging the running service and are not retained in any structured, searchable, or long-term store beyond whatever your hosting provider's standard log rotation does.

Cookies & tracking

None. No analytics, no ad trackers, no third-party scripts. The only thing your browser stores locally is whatever's needed for the current tab's session (in memory — nothing written to localStorage or cookies).

Third parties

We don't share data with anyone, because there's no data to share. The app is hosted on standard cloud infrastructure (see our deployment documentation if you're curious), which processes encrypted traffic the same way any web host does.

Children's privacy

This service is intended for users 18 and older — see our Terms of Use. We do not knowingly collect information from anyone under 18, and given we don't collect information from anyone at all, there is nothing to remove even if we learned otherwise. If you believe a minor is using this service inappropriately, please stop using it and, if relevant, contact the hosting provider directly.

Changes to this policy

If this policy ever changes, the "last updated" date above will change with it. Given the app's entire design is built around not collecting data, meaningful changes here are unlikely — but we'd rather say that plainly than promise never to update a webpage.

Questions

This is a small, independently-run project without a support team. If something here is unclear, the source code is the most reliable source of truth for exactly what the app does.