Messages don't go to a server
Two devices talk directly. The wireless field is short-range; we operate no server. If there's no server to steal from, there's nothing to steal.
Your message goes out of you, reaches your peer, gets wiped on both sides shortly after. The middleman server — doesn't exist.
Two devices talk directly. The wireless field is short-range; we operate no server. If there's no server to steal from, there's nothing to steal.
The chat doesn't open until the other side accepts. Receiving messages without consent is technically impossible.
Each chat's lifetime is a joint choice. When the timer fires the message is wiped from both devices.
Your number is a defense against spam and fake accounts. After verification it isn't stored long-term, isn't shared, isn't shown on profile.
Messages live in RAM only. When the app closes or the timer fires they're gone. There's no copy on disk to recover.
In an emergency the Panic Wipe button in Privacy removes all active sessions, messages, and timers instantly.
Block anyone who bothers you in one tap; the chat is wiped from both devices. Report abuse with categories and track its status.
When talking to remote peers the channel is end-to-end encrypted. Keys are generated on device; the content can't be read by anyone, including us.
When you close Zerolog or the chat timer runs out, no copy of your messages remains anywhere — not on our servers, not in our backups, not on someone else's device, nowhere. You can read this from how the app works; the code itself says it without needing words.