Privacy Policy
Last updated October 30, 2026 · Draft
The short version
We can’t read your rooms. Messages, nicknames and room names are encrypted on your device with a key that never reaches us. There are no accounts, no ads and no trackers, and rooms are deleted when they end.
What we can’t see
Each room has a key that lives only in its invite link and on the devices of people in the room. The key sits in the part of the link after “#”, which browsers never send to a server. Everything you write is encrypted with it before it leaves your device, so we only ever store scrambled data that we can’t decrypt.
What we store, and for how long
- An anonymous identity for your device, created the first time you open noroom. It isn’t linked to your name, email or phone number.
- Rooms and messages, encrypted: the room’s id, size, type and timer, who its members are (by anonymous identity), and the encrypted messages. All of it is deleted when the room expires or is burned. Encrypted copies can remain in our database backups for up to 7 days.
- Purchases: whether you have room passes or a membership, linked to your anonymous identity. Payment itself is handled by Apple or Google; we never see your card.
- Reports: when you report someone, the messages you select are sent to us in readable form along with the reason and their encrypted originals, so we can review them. Reports are kept for 90 days, or longer if the law requires (for example, a preservation request from NCMEC or law enforcement).
- Technical logs: our servers log IP addresses and room ids for a short time (up to 7 days) to keep noroom running and stop abuse. They never contain room keys or readable messages.
What stays on your device
Room keys (in your device’s secure storage), your list of blocked members, and your age confirmation. They’re removed when a room ends or when you delete the app.
Who we share data with
We don’t sell your data or use it for advertising. We use a few providers to run noroom, and they only process data on our behalf:
- Supabase hosts our database and servers.
- RevenueCat manages purchases and subscriptions, using your anonymous identity.
- Apple and Google process payments through their app stores.
- Vercel hosts this website.
We share information with authorities only when the law requires it, including reports of child sexual abuse material to NCMEC. Because of encryption, the most we could ever share about a room is its encrypted data and metadata, plus anything someone reported to us.
Your choices
You can leave or burn your rooms at any time, which deletes them for you (and, if you burn one, for everyone). Deleting the app removes your keys from your device. Because we don’t know who you are, we can’t look up your data by name or email, but if you contact us from the app we’ll help with any request about data tied to your anonymous identity.
Children
noroom is for adults 18 and over. We don’t knowingly allow anyone younger to use it.
Changes
If we change this policy in a meaningful way, we’ll say so in the app or on this page first.
Contact
Privacy questions: hello@noroom.app.