Privacy Policy
Effective Date: August 11, 2026
01. Core Philosophy: Zero Registration
CipherRoom is designed from the ground up to operate without collecting personal identity data. We do not ask for or store email addresses, passwords, phone numbers, real names, or social logins to create or join collaboration rooms.
- No user account registration or login required.
- Usernames exist only transiently in your local browser storage (`localStorage`).
- Usernames expire automatically after 24 hours of inactivity.
02. Temporary Data & Auto-Destruction
Every room created on CipherRoom has a strictly enforced expiration timer (1 hour, 6 hours, or 24 hours). When a room reaches its expiration timestamp:
- All chat messages sent within the room are permanently deleted.
- All collaborative notes are purged from the database.
- All uploaded files are permanently deleted from object storage.
- The room record itself is deleted with database cascade isolation.
- No backups or archives of expired room data are retained.
03. Client-Side End-to-End File Encryption
Files shared in CipherRoom undergo client-side encryption using the Web Crypto API before being transmitted to our servers:
Technical Implementation:
• Algorithm: AES-256-GCM encryption with PBKDF2 key derivation (100,000 iterations).
• Encryption Key: Derived directly in your browser using the room password.
• Zero Server Knowledge: Raw room passwords and unencrypted files never reach our servers.
04. Cookies & Local Storage
CipherRoom uses minimal storage strictly required for technical operation:
- Session Cookies: Temporary HMAC-signed HttpOnly cookies to authorize active room sessions during your visit.
- Local Storage: Stores your display name locally in your browser for convenience.
- No Advertising Cookies: We do not use third-party tracking or advertising cookies.
05. Contact & Inquiries
If you have any questions, concerns, or requests regarding this Privacy Policy or CipherRoom's privacy protections, please contact us at: