Privacy Policy

1. Zero Data Collection

At ChuteChat, privacy is not a feature—it is our fundamental architecture. We do not collect, process, or sell any personal data. Specifically:

• No Accounts: You are not required to create an account, provide an email address, or enter a phone number to use ChuteChat.
• No Identifiers: We do not track or store IP addresses, device identifiers, or browser fingerprints.
• No Cookies: We do not use tracking cookies, analytics scripts, or third-party advertising trackers.

2. End-to-End Encryption

All communication passing through ChuteChat is encrypted and decrypted strictly on your device using browser-native Web Crypto APIs (`AES-GCM`).

Because decryption keys are generated locally on your device and are never transmitted to our servers, we possess zero technical ability to decrypt or read your messages.

3. Zero-Persistence Message Routing

Messages routed through our backend exist only in volatile server RAM for the fraction of a second required to deliver them to active WebSocket peers.

• Messages are never written to disk, databases, or persistent server logs.
• Older messages are automatically purged on the client side according to our 2-message rolling limit.
• Once a session ends or a connection is severed, all associated transit data is permanently erased.

4. Third-Party Infrastructure

Our network domain routes through Cloudflare for SSL encryption and DDoS protection. While Cloudflare processes network-level transit traffic to ensure connection stability, no decrypted message content is accessible to Cloudflare or any other third party.

5. Policy Updates

Because we do not store contact details, any future updates to this Privacy Policy will be published directly on this page.