XORCHAT · PRODUCTION

Privacy, retention & safety.

Last revised: October 1, 2026. New private text, GIF and voice messages sent through Encrypted Conversations are end-to-end encrypted between verified devices. The service stores ciphertext plus account, membership and routing metadata. Legacy message history from before cutover remains server-readable and encrypted at rest with XOR Shield v1.

View the current security scope and verification status, including the distinction between new private web messages, legacy history, metadata and other features. For device setup and encrypted key backups, use the encryption guide.

Account data

We store username, display name, verified account email, password hash, account timestamps, accepted-policy records, block/favorite/group settings, notification preferences, presence choices and subscription entitlement state required to operate the account.

Messages and conversation state

Encrypted Conversations stores encrypted event ciphertext and encrypted media blobs for up to 90 days under the current product policy. Client devices and user recovery material hold message-decryption keys; XorChat does not keep a universal plaintext message key for these new private conversations. Legacy room/direct-message history, profiles, presence, read state and other service metadata remain server-readable.

Voice and video calls

Call signaling is encrypted at rest with XOR Shield v1 and call history is server-stored. Voice/video media uses its existing encrypted WebRTC/TURN path. The private-message E2EE release verification does not establish equivalent acceptance for calls or Remote Assist. Relay infrastructure processes network metadata needed to route calls; this disclosure is not a guarantee of anonymity.

Desktop notifications

Browser notifications are opt-in and require browser permission. Message previews remain off unless the member explicitly enables them. Per-DM notification muting is available.

Premium subscriptions

Paid-plan records can include plan, entitlement status and Stripe customer/subscription references. Stripe processes payment and billing information. Deleting a XorChat account does not itself cancel its Stripe subscription. Until self-service Stripe subscription management is enabled, contact billing@xorvaniq.ca to change or cancel a paid plan.

Safety, moderation and staff security

Members can block and report content. Moderation records may retain pseudonymized case metadata after deletion where reasonably needed for safety or enforcement. Staff accounts use authenticator MFA and hashed one-time recovery codes for privileged actions. Staff-only MFA secrets and private staff notes are excluded from member account exports.

Security metadata

Application rate limiting uses hashed identifiers. Infrastructure and security logs may process network metadata as required to operate and protect the service. Verification and password-reset links are single-use, expire, and are rate-limited.

Export and deletion

The Account & privacy screen provides an account-data export and permanent deletion for ordinary member accounts. Deletion removes the member account, direct-message conversations involving the member, call state/history, read/typing state and outstanding email-action tokens. Moderation evidence may be pseudonymized or retained where needed for safety or legal obligations. Encrypted backups may persist temporarily under the backup-retention cycle before expiring.

Service providers

XorChat uses XORVANIQ/OVHcloud infrastructure for application and relay services, Stripe for optional paid subscriptions, Cloudflare authoritative DNS and supported mail infrastructure for account emails. Processing location varies by provider.

Your controls

Members can manage account email, notifications, calls, blocks, favorites, conversation archives/mutes, export and deletion in the app. Privacy requests: privacy@xorvaniq.ca. Abuse/security reports: abuse@xorvaniq.ca.

Policies

Use of XorChat is also governed by the XORVANIQ Terms, Privacy Policy, and Acceptable Use Policy.

Create an account Back to XorChat