Privacy
What is stored
Room codes, expiry times, anonymous participant identifiers, text blocks, and image metadata are stored in SQLite. Uploaded images are stored as files on the server. Optional display names are saved in your browser and shared with connected participants.
Who can access a room
Anyone with the room link or code can read and change its contents. Room codes are not passwords. This service does not currently provide end-to-end encryption.
Expiry and deletion
Expired rooms become inaccessible immediately. Scheduled cleanup removes room records and associated image files. Legacy JSON backups made during the storage migration are retained separately and require operator-managed deletion.
File transfers and browser storage
Direct file transfers are relayed through the server to connected recipients. Your browser stores an anonymous room identity and, for rooms you create, a deletion token. Clearing browser data removes those preferences and tokens.
Analytics
Microsoft Clarity may run when configured by the site operator. Avoid sharing personal or sensitive information. Use HTTPS when deploying this service.