PRIVACY + METADATA
Clear expectations, no fake guarantees
We self-host for control and privacy improvements — but we do not claim “zero metadata” or “perfect anonymity.”
What self-hosting improves
- We control infrastructure and administration.
- We control server logging and retention settings.
- We can tune or prune logs in ways public servers may not.
- Fewer third-party server admins are involved.
What users still need to know
- Server-level metadata may still exist (room membership, timing, device/session data).
- IP-related logging depends on config (server, proxy, system logs).
- In federated rooms, other servers may have different practices.
- Encryption protects message content in encrypted rooms, not all metadata.
Logging & retention philosophy
Minimal retention where practical, with configuration choices made intentionally and reviewed over time. Publish a plain-language policy here when you finalize your settings.
Lawful request posture
Use honest language only. Do not promise impossible secrecy. Explain what data may exist, who controls it, and what can be minimized by policy and configuration.