Privacy Notice

Version 2 · 13 November 2026. This notice describes what the self-hosted marpuf.me Chat application is designed to process. The site operator must review and complete this notice with actual contact details, hosting/retention arrangements, and a lawful basis before inviting other people.

Information used to provide the service

We store a numeric account ID, chosen @username, display name, password verifier (not the plaintext password), profile bio and avatar, account settings, account creation and privacy-acknowledgement times, session identifiers (hashed server-side), messages, friendships, group membership and moderation records. We also store group pictures, uploaded files and their file references. The one-time license code used at signup is recorded for staff audit after it has been removed from the list of unused keys.

How information is used

These records let you sign in, communicate, manage groups, restrict unwanted interactions, moderate abuse, track license redemption and protect account access. Voice calling uses browser microphone permission and self-hosted TURN relay-only WebRTC. A relay operator can process network connection information; calls do not fall back to direct peer-to-peer connections.

Who can see information

Other users can see information you choose to publish in your profile, your messages in their permitted conversations, and shared group information. Moderators can see account IDs, handles, ban status, username change requests, issued license codes and redemption records. Moderators cannot browse ordinary active direct messages through the panel, but they can review the original contents of messages users have removed using the three-dot message menu, including deleted direct messages. The infrastructure operator has technical access to database and stored files. Messages are not end-to-end encrypted.

Network data and external media

Servers and reverse proxies may process IP addresses and technical requests. External GIF links may load content from third-party websites, which have their own privacy practices. Do not share secrets or highly sensitive content on this service.

Retention and your rights

Deleting a message hides it from regular chat views, but its original text, sender ID and deletion actor/time remain in a staff-only archive for moderation. A staff account wipe permanently disables sign-in and removes the profile name, handle, bio and avatar, but retains numeric IDs, group memberships, historical messages and original license-redemption records. It is therefore NOT complete deletion or legal anonymization of all personal data. These records remain until removed through a documented operator retention/deletion process. The operator must establish a lawful basis and retention limits for each category. Backups may persist separately. For access, correction or deletion inquiries, contact the person who invited you or the site operator. The operator must publish an actual contact channel and a specific retention/deletion policy before wider deployment.

Legal information

A checkbox records that you have read this notice; it does not authorize unrelated data collection or replace applicable privacy-law obligations. Any optional processing that legally requires separate consent must be offered separately. The operator is responsible for determining the applicable legal basis, handling minors' data lawfully, securing the service, and satisfying user requests.