Privacy & Security

Server Rules

Freedom of expression is respected. However, the following are prohibited and will result in permanent ban:

  • Violence (threats, coordination of attacks, incitement)
  • Harassment (doxing, personal attacks, discrimination, spam)
  • Illegal content (CSAM, terrorism, human trafficking, malware distribution)

What's Stored

  • Account: Username and hashed password
  • Messages: Stored (you control deletion via your XMPP client)
  • Metadata: Sender, recipient, timestamp
  • Contact lists: Your roster
  • File uploads: Automatically deleted after 24 hours

Privacy Measures and Security

  • Use OMEMO or OpenPGP E2E encryption
  • Tor Hidden Service: Connect via .onion address for anonymity
  • Last Activity Tracking: Disabled
  • Minimal Logging: Errors only, 3-day retention
  • Database Query Logging: Disabled
  • IP Privacy: Use Tor/VPN/Proxy to hide your IP address
  • TLS Encryption: Required for all connections
  • Fail2Ban: Automatic blocking of brute-force attacks
  • Data Sharing: Never shared with third parties (except federation and legal requirements)