Privacy policy

1. Information We Collect

• Account information: name, email, and profile details provided by you or your authentication provider.
• Authentication data: we use third-party authentication (such as Clerk) to manage sign-in.
• Usage and activity data: when a recipient opens a message or shortlink, we record access metadata like timestamp, IP address, approximate location, and device/browser details so senders can view activity and we can prevent abuse.
• Support data: details you send us when requesting help.

2. Client-Side Encryption

Messages and files are encrypted in your browser. We do not store encryption slugs or plaintext message contents. Only the slug holder can decrypt a message.

3. How We Use Your Information

• Provide and maintain the service
• Show activity analytics to senders
• Prevent abuse and protect the platform
• Respond to support requests
• Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share data with trusted service providers (such as hosting, analytics, and authentication) to operate the service, or when required by law or to protect our rights.

5. Data Retention

Retention depends on plan limits and self-destruct settings. Expired content may be purged and cannot be restored. Activity metadata is retained as needed for security, analytics, and compliance.

6. Cookies

We use essential cookies to enable authentication, security, and preferences. We do not use advertising cookies.

7. Your Rights

You may request access, correction, deletion, or portability of your data. To exercise these rights, contact us using the information below.

8. Changes to This Policy

We may update this policy from time to time. We will post the updated version and revise the "Last updated" date.

9. Contact Us

Questions about privacy? Email info@msgcrypt.com.