Privacy Policy

Last updated 2026 · Controller: Timo Bonin & Florian Kleiner GbR & Florian Kleiner GbR, Mooshaldenweg 11, 88069 Tettnang, Germany

What we store

Guest use: A random device ID and display name in your browser's localStorage. No personal data required.

Signed-in users: Your email, hashed password (SHA-256 + salt), and chosen name. Plain-text passwords are never stored.

Messages & files: Stored on Vercel infrastructure. Guest sessions are deleted immediately when both peers disconnect. Signed-in sessions are stored for 90 days after last activity.

Uploaded files

Files are stored on Vercel Blob Storage. They are accessible to anyone with the direct link during the session's lifetime. We do not scan or analyze file contents.

Sub-processors

Vercel Inc. (hosting, KV, Blob) — EU Standard Contractual Clauses apply. No other third parties receive your data.

Your rights (GDPR)

You have the right to access, correct, delete, and port your data. Contact us by post at the address in the Imprint.

Cookies

We use localStorage only — for session ID, name, and theme preference. No tracking cookies. No analytics.