Privacy policy

Data we process

GIFs and stickers

GIF search is performed by our server against a third-party catalog (KLIPY or GIPHY). Only the search text, language and paging parameters are sent to that service — never your identifier, username or IP address. A GIF you choose is stored on our server and delivered to recipients as our own file.

Link previews and chat folders

To show a link preview, our server fetches the page itself — your device never contacts the third-party site, so the site does not learn your IP address. We do not store which links you pasted: the result is cached for up to 24 hours by link address, not tied to any user. Chat folders (their names and the list of conversations in them) are stored on the server so they match across your devices, and are deleted with your account.

Stories

Stories (text on a coloured background or a photo with a caption) are visible to others for 24 hours and then deleted; the photo is removed from the server shortly after expiry. You choose who sees your stories: everyone, contacts only, or nobody, and you can exclude individual people; the setting applies at once to stories you have already published. The author sees who viewed a story and who reacted, provided the author has read receipts turned on; your views and reactions are visible to nobody except the author. A reply to a story is an ordinary message with a snapshot of the story attached. When you report a story, moderators receive a copy of it. Stories, views and reactions are deleted with your account.

Secret chats

The desktop app checks for updates with a plain request that carries no account, token or device identifier; updates are signed with our key, and the app verifies the signature and checksum before installing. As with any request to the server, the web server log keeps the IP address and the time of the request.

Secret chats use end-to-end encryption: the content is decrypted only on the two participants' devices, while our server stores and relays opaque ciphertext and cannot read it — neither we nor moderators can. We can see service data: who created a chat with whom, when, and the size of messages and attachments. Undelivered messages and files are deleted as soon as they are received, when the chat is closed, or after 30 days at the latest. A secret chat is bound to two devices and is not carried over to others. When you report a secret chat, moderators receive only the messages you choose yourself.

Reports

When you report a message, user or group, a copy of the message and a few preceding messages of the conversation (for context), attachments and profile details are sent to moderators for review. Only administrators can see this data; the reported person is not notified. Attachments from a report are kept until the report is closed and for up to 90 days afterwards.

Privacy settings

In settings you can hide your last-seen time, turn off read receipts and typing indicators, restrict who can message you, call you or add you to groups, and hide yourself from search.

What we do not do

We do not show ads, and we do not sell or share your data with third parties for marketing.

Retention and deletion

You can delete your account in the app or at /account/delete. Your profile, password, sessions and push tokens are deleted; messages you sent remain visible to other participants, unlinked from your profile. Database backups are kept for up to 14 days.

Security

Connections are protected with HTTPS/TLS, access to data is restricted, and passwords are never stored in plain text.

This document may be updated; the current version is always available on this page.