We take security seriously — especially because we believe developer tools should be trustworthy by design.
Private rooms require a password known only to invited members. Passwords are hashed before any comparison — never stored in plaintext.
We collect no email, no IP address, no personal data. Your username and userId exist only in your browser's localStorage and in server memory during your active session.
Chat messages are stored in working memory on the server — not in any database. Restarting the server clears all data permanently.
No analytics SDKs. No advertising pixels. No session recording tools. Your usage is invisible to third parties.
Your privacy is our core mission. We use industry-standard security practices to ensure your data stays yours, even if we don't publish our source code.
All traffic runs over HTTPS (TLS 1.3) via Vercel's edge network. Your data is encrypted in transit at all times.
Found a security vulnerability? Please report it responsibly by opening a private GitHub Security Advisory or emailing us directly. We appreciate responsible disclosure and will respond promptly.