Privacy Policy Chat Uncontrol

---

At Chat Uncontrol, we are committed to providing a secure, zero-knowledge communications node where your privacy is mathematically protected. This Privacy Policy outlines how we handle your data and ensures that your text messages, file streams, and real-time voice communications are fully encrypted and unreadable by anyone—including the server operators.

By connecting to a Chat Uncontrol node, you agree to the terms of this Privacy Policy.

Chat Uncontrol operates on a strict zero-knowledge architecture. We do not collect any personal information or data.

• No Personal Data Required: We do not ask for your name, email address, or phone number. The "Display ID" you choose is temporary and stored only on your local device.
• No Content Tracking: We do not track, scan, or log the content of your messages, files, or voice communications.
• Zero-Trace URL Routing: Handshake passphrases used in share links are kept strictly in the URL hash fragment (#), ensuring they are never transmitted to or logged by the server.

Your privacy is guaranteed by mathematics. All data routed through Chat Uncontrol is fully encrypted client-side; only you and your intended peers can decrypt it.

• Client-Side Key Derivation: Passphrases are mathematically expanded into secure keys using PBKDF2 (up to 600,000 iterations) entirely within your browser. These keys never leave your device.
• AES-GCM 256-bit Encryption: All text and files are encrypted using standard AES-GCM before they touch the network.
• Insertable Media Streams: Real-time voice audio is encrypted at the raw binary frame level before transmission, ensuring the server only relays obscured noise.
• No Developer Access: Because the encryption happens locally on your device, the server operators physically cannot decrypt, read, or listen to any data passing through the node.

While the server facilitates the transfer of encrypted data, it has no ability to read it.

• Encrypted File Chunks: Uploaded files are sliced into chunks and encrypted locally. The server temporarily stores these unreadable binary chunks strictly to facilitate downloads for your peers.
• Automated 30-Minute Purge: All encrypted file chunks temporarily held on the server are permanently deleted by an automated system script after 30 minutes.
• Ephemeral Voice Relay: Voice communications are live-relayed in memory. Audio packets are immediately discarded after transmission and are never written to disk.

We do not build profiles on our users or track behavior.

• No Metadata Logging: We do not log message timestamps, IP connection histories, or sender/receiver relationships. Text messages are relayed in RAM and immediately forgotten.
• No Analytics or Ads: Chat Uncontrol contains zero third-party trackers, analytics, or advertising SDKs.

Your long-term data is your responsibility and remains solely under your control.

• Local Storage Only: Your saved Node IDs and encrypted passphrases (your "Vault") are encrypted and stored in your browser's local localStorage. The server has no copy of your Vault.
• Server Retention: We maintain no long-term user databases. The only data temporarily retained by the server are the 30-minute encrypted file buffers mentioned above.

We use modern browser APIs to ensure a carrier-grade security posture:

• WebCrypto API: All cryptographic operations utilize the native, hardware-accelerated WebCrypto API built into modern browsers.
• Secure Transport: In addition to the E2EE payload encryption, all connections to the server are protected by standard TLS/WSS transport encryption.

Because we do not collect personal data, standard data requests do not apply (we have nothing to give you). However, you have absolute control over your local footprint:

• Instant Memory Scrubbing: Disconnecting from a cell immediately zeroes out the cryptographic keys held in your device's RAM.
• Self-Destruct Button: You can permanently delete your identity, vault, and all saved configurations by using the "Wipe Data" button on the login screen, which irrevocably clears your local browser storage.

We may update this Privacy Policy to reflect changes in our node architecture or for operational reasons. Any modifications will be updated directly within this document.

If you have any questions or concerns about this Privacy Policy, the node's cryptography, or the security of your data, please contact the node operator at: info@chatuncontrol.eu