Privacy Policy

CORE PRINCIPLE: We collect the minimum data necessary for platform operation and NEVER sell, share, or monetize your information.

1. INFORMATION WE COLLECT

1.1 Minimal Required Data

• Account Information: Username, email (optional for password recovery only)
• Communications: Messages, files, and content you voluntarily post
• Technical Data: Session tokens for authentication (no IP logging)

1.2 What We DO NOT Collect

• IP addresses (not logged or stored)
• Browsing history or activity tracking
• Location data
• Device fingerprints
• Third-party cookies
• Analytics or behavioral data
• Real names or identifying information (unless voluntarily provided)

2. HOW WE PROTECT YOUR DATA

2.1 Security Measures

• Encrypted Storage: Data encrypted at rest
• HTTPS/TLS: All communications encrypted in transit
• Access Controls: Strict authentication requirements
• No Backdoors: No intentional security weaknesses
• Regular Updates: Security patches applied promptly

2.2 Server Security

• Hidden Origin: Server IP masked via Cloudflare Tunnel
• No Direct Access: Firewall blocks all unauthorized connections
• Minimal Logging: Only essential error logs kept temporarily

3. DATA USAGE

3.1 How We Use Your Data

Your data is used ONLY for:

• Platform functionality (messaging, file sharing)
• Account authentication and security
• Technical troubleshooting (minimal error logs)

3.2 How We DO NOT Use Your Data

• Selling to third parties
• Advertising or marketing
• Profiling or behavioral analysis
• Training AI models (without explicit consent)
• Sharing with law enforcement (unless legally compelled with valid warrant)

4. DATA RETENTION

4.1 Active Data

Messages and content remain available while your account is active. You may delete messages/content at any time.

4.2 Deleted Data

• User-Initiated Deletion: Permanently removed within 30 days
• Account Deletion: All associated data purged within 90 days
• Backups: May persist in backups for up to 90 days before automatic expiry

4.3 Logs

• Error Logs: Kept for 7 days maximum, then auto-deleted
• Session Logs: No persistent logs maintained
• Access Logs: Disabled (no IP logging)

5. THIRD-PARTY SERVICES

5.1 Infrastructure Providers

• Cloudflare: CDN/DDoS protection (see Cloudflare Privacy Policy)
• No other third parties have access to user data

5.2 No Analytics

We do NOT use Google Analytics, Facebook Pixel, or any tracking services.

6. USER RIGHTS

6.1 Your Rights

• Access: Request copy of your data
• Deletion: Request full account and data deletion
• Export: Download your messages and files
• Anonymity: Use pseudonyms; no real name required
• Opt-Out: Stop using the platform at any time

6.2 Exercising Rights

To exercise these rights, contact platform administration or use in-app data management tools.

7. COOKIES

7.1 Essential Cookies Only

We use ONLY essential session cookies for:

• User authentication
• Session management
• Security (CSRF protection)

7.2 No Tracking Cookies

We do NOT use advertising, analytics, or cross-site tracking cookies.

8. CHILDREN'S PRIVACY

This platform is NOT intended for users under 18. We do not knowingly collect data from minors. If we discover underage use, accounts will be terminated and data deleted.

9. INTERNATIONAL USERS

This platform may be accessed globally. By using it, you consent to data processing as described herein, regardless of your location.

10. DATA BREACHES

In the unlikely event of a data breach:

• Users will be notified within 72 hours
• Breach details and impact will be disclosed
• Mitigation steps will be provided
• Regulatory authorities will be notified as required by law

11. LAW ENFORCEMENT REQUESTS

TRANSPARENCY: We will resist overbroad or unlawful requests for user data. If legally compelled by valid court order, we will:

• Provide ONLY the minimum data required
• Notify affected users (unless legally prohibited)
• Challenge requests we believe are improper

12. CHANGES TO THIS POLICY

We may update this Privacy Policy. Material changes will be announced on the platform. Continued use after changes constitutes acceptance.

13. CONTACT

Questions about privacy? Contact: [PRIVACY CONTACT TO BE DETERMINED]

---

SUMMARY: YOUR PRIVACY MATTERS

• Minimal data collection
• No IP logging
• No tracking or analytics
• No data selling
• Encrypted communications
• User data deletion on request
• Anonymity supported

We exist to provide communication, not to exploit your data.

YOUR PRIVACY IS PROTECTED TO THE MAXIMUM EXTENT POSSIBLE.