Privacy Policy

The short version

GhostChat is designed to be private by default. Conversations are end-to-end encrypted and delivered directly between devices (peer to peer). GhostChat does not store your messages, files or call recordings on any server.

What we store

GhostChat stores only the minimal ephemeral information needed to connect two peers to each other — the signaling service briefly routes connection handshakes between devices. Your identity, keys, messages and files are kept on your own device only.

• No message content is ever uploaded to or stored on a server.
• No file content is uploaded to or stored on a server.
• No call audio or video is recorded or stored on a server.
• No account, phone number or email address is required.

End-to-end encryption

Messages are encrypted on your device and can only be decrypted by your chat partner. The encryption keys are generated in your browser and never leave your device, so even the service cannot read your conversations.

Peer-to-peer delivery

Once two devices are connected, messages, files and calls travel directly between them. The server is only used to help the two peers find each other and does not see the content.

Your data on your device

Your identity and conversations live in your browser's local storage (IndexedDB) on your device. Clearing your browser data, or using a different device, removes or separates you from that data.

Contact

Questions about privacy? Reach out through the project's repository or support channels.