Privacy
We can’t read what you send, and we keep as little as we can, for as short as we can.
Updated September 24, 2026
What we can’t see
Messages, files and their names, room and forum names, forum posts, direct messages and notification text are encrypted on your device, with keys we never receive. We can’t read them, and neither can anyone who gets into our server.
What we keep, and for how long
Rooms
Nothing once everyone has left. Encrypted files are deleted within minutes of the last person leaving.
Rooms with shared history
Recent encrypted messages, in memory only, until the room has been empty for two minutes.
Rooms kept alive by our admins
Encrypted messages and files, until the date the admin set.
Room settings
For rooms with a name, password or rules: the owner’s username, the encrypted name and look, a hash of the password, and the rules. Deleted 30 days after the room was last used.
Forums
Encrypted posts and files, until the forum expires (1 to 30 days, or longer if extended).
Accounts
Your username, a hash of your password, and your avatar, until you delete the account (or we do, for breaking the terms).
Sign-ins
One record per device: a hash of its sign-in token, a label such as “iPhone · Safari”, and when it was created and last used. Deleted when you sign out, or after 180 days unused.
Direct messages
Encrypted messages, who sent them to whom, and when, until they expire (the sender picks 1 hour to 30 days) or are unsent. Also your browsers’ public keys, whom you’ve accepted or blocked, and your encrypted history key and recovery backup.
Notifications
Your browser’s push address, which rooms it follows (by anonymous ID), and scrambled tags for mentions. Deleted when you turn notifications off, or after 90 days unused.
Reports and help requests
What you write, the room’s anonymous ID, and your name if you’re signed in. A help request also carries the room’s link so an admin can join; the link is deleted once it’s resolved.
Bans
The banned account or IP address and the reason, for as long as the ban lasts.
Moderation records
Reports, bans and a log of what our admins did, kept so abuse can be dealt with. Deleting your account removes your name from reports you filed.
Totals
Site-wide counts (messages, uploads, sign-ins) that aren’t tied to any person or room.
IP addresses
Our server sees your IP address with every request. It keeps the addresses connected to each room, and the last address each account signed in from, in memory only, so our admins can deal with abuse. An address is written to disk only if it’s banned.
Like most websites, our web server also keeps standard access logs (IP address, time, and the page asked for, but never a room’s link) for about two weeks.
On your device
Your list of rooms, settings, guest name, keys and notification list are stored in your browser, not on our server. Clearing the site’s data removes them.
We don’t use cookies, ads, analytics or trackers, and the site doesn’t load anything from other companies.
Who else sees anything
Our hosting provider stores the encrypted data described above. If you turn on notifications, your device’s push service (Apple, Google, Mozilla or Microsoft) delivers them: it sees when one arrives and its size, never its text. We don’t sell or share data with anyone else.
Requests from authorities
We can only hand over what’s described above. We can’t decrypt messages, files or direct messages, because we don’t have the keys.
Your choices
You can use bchr.xyz without an account. If you have one, you can delete it yourself on your profile page. That removes, right away, your account and avatar, your direct messages (for the people you wrote to as well), your keys, your sign-ins on every device and your notification settings. Rooms you set up keep their name and password, with no owner. Forum posts you wrote stay, encrypted, until their forum expires.
Your username can’t be registered again after that, so nobody can pose as you. To enforce that we keep a scrambled form of it, not the name itself.
To ask what we hold about your account, write to admin@bchr.xyz.
bchr.xyz isn’t meant for children under 13.
Changes
If this policy changes, we’ll update the date above, and say so on the site when the change matters.
Questions: admin@bchr.xyz. See also the terms and how it works.