Privacy
What we can and cannot see. Short version: we can see that a meeting happened and who was invited; we cannot see or hear what happened in it.
What never reaches us
- The meeting password. It is typed into your browser and turned into an encryption key there. It is never sent to our servers in any form.
- Audio, video and screen sharing. Every frame is encrypted in your browser before it is sent. Our media servers forward encrypted packets they cannot decode.
- Captions, notes and background effects. Live captions and notes use speech recognition only when your browser can run it on your device; otherwise the feature is simply unavailable. Blur and virtual backgrounds are computed in your browser with a model downloaded from this site; your video is never uploaded for it.
- Chat messages and participant names. Encrypted in the browser with the same key. Chat is stored only as ciphertext, and deleted about ten minutes after the last person leaves.
What we store, and how
- Host accounts: your email address (encrypted at rest), sign-in times.
- Meetings: title (encrypted at rest; it also appears in the invitation email), scheduled time, when it was created and ended.
- Invitations: each invitee's email address and optional name (encrypted at rest), a hash of their personal link, whether and when the link was used, and how many different browsers used it.
- Error reports: when the app itself breaks in your browser, it sends us the error type, a short message with addresses, links, codes and other identifiers removed, which screen was open, and your browser family (for example "Safari 18 · iOS"). No content, no names, no IP address is kept with it. Deleted after 30 days.
- Usage totals: aggregate participant-minutes per month, used to keep the service within its sponsored capacity. These are not tied to individuals.
Encryption at rest uses a key held only by our application; the hosting provider's own disk encryption applies on top of it. Records about a meeting are removed when the host deletes it.
How long we keep things
A job runs every night and deletes whatever has passed its period. Nothing is kept "just in case".
| Data | Kept until |
|---|---|
| Meeting records and their invitations | 30 days after the meeting ends (90 days if it was reported). A one-off meeting nobody ended is treated as ended 30 days after its date; a repeating series nobody has joined for 180 days is ended. |
| Chat history (ciphertext only) | 10 minutes after the last person leaves |
| Sign-in codes | 10 minutes |
| Sign-in sessions | 30 days, or until you sign out |
| Host accounts | Until you delete them, or automatically after 365 days without a sign-in if the account never created a meeting |
| Reports | 90 days |
| Block list of banned addresses (keyed hashes only) | Indefinitely |
| Browser error reports | 30 days |
| Monthly usage totals (not tied to people) | 13 months |
| Connection logs held by Cloudflare | Per Cloudflare's own retention; we don't export or keep them |
Reports
Guests can report a meeting. A report records which invitation reported which meeting and an optional note (encrypted at rest). Metadata about reported meetings is kept for 90 days instead of 30 so the complaint can be followed up, including with law enforcement where required. Organizers reported by several participants are paused automatically and told by email; after further reports their email address is added to a block list (stored as a keyed hash, kept indefinitely) that prevents signing in, being invited, or joining meetings.
What we see while a meeting runs
- Connection metadata: IP addresses, browser type, connection and disconnection times, and the sizes and timing of encrypted messages.
- Which invitation each participant joined with.
Participants do not see each other's IP addresses: all media is routed through Cloudflare rather than directly between browsers.
Emails
We send sign-in codes to hosts and invitation emails to the addresses a host enters. Invitation emails contain the meeting title, the host's email address and the invitee's personal link. They never contain the meeting password.
Infrastructure
The service runs on Cloudflare (Workers, Durable Objects, D1, Realtime, Email Service). Cloudflare processes connection metadata and encrypted traffic under its own privacy terms. We do not use analytics or advertising trackers, and we do not sell or share data.
Your choices
- Hosts can delete a meeting at any time, which removes its invitations.
- Hosts can download everything we hold about them as a JSON file ("Download my data" on the dashboard) and delete their account themselves.
- Invitees can remove their own email address and name from an invitation at any time, from their join page ("Remove my details"), without asking anyone.
- Anyone can ask us to delete records by emailing the address below.
- We don't track you, so there is nothing to opt out of. Browsers that send a Global Privacy Control or Do Not Track signal get exactly the same treatment as every other browser: no profiling, no sale, no sharing.
Requests from governments and law enforcement
- We can only hand over what we have. Meeting audio, video, chat and files are never in our possession in a readable form, and no request can change that.
- We require valid legal process from a body with jurisdiction over us before disclosing any account or meeting record, and we interpret requests narrowly.
- We tell affected hosts about a request for their records before complying, unless a law or court order prohibits it or the delay would create a risk of death or serious harm; where notice is delayed, we give it as soon as the restriction ends.
- We publish how many requests we received and how we responded on the transparency page.
Third parties on this site
Pages, scripts, fonts and the background-effects model are served from this domain only. If bot protection is enabled on the sign-in page, a Cloudflare Turnstile challenge loads from challenges.cloudflare.com and sees your IP address and browser details under Cloudflare's terms; it is the only third-party resource. There are no analytics, no advertising, no social widgets.
Contact
Questions, deletion requests and abuse reports: .
Last updated October 2026.