We do not collect personal names, emails, phone numbers, or IP addresses. The server never receives plaintext messages.
All messages are encrypted with AES-256-GCM using keys derived from the room code and a random per-room salt. HMAC-SHA256 signatures ensure integrity. The server stores only ciphertext.
Messages exist only in active memory while a room is active. When the last user leaves, the room and all messages are permanently deleted. No database, no logs.
Users choose anonymous codenames. No registration, no personal information required.
An admin panel is available for moderation. Admin access requires a secret key stored only on the server.