Privacy and your data
What we keep, for how long, and who can see it, in plain words.
What we don't ask for
- ID and phoneWe never ask for a photo of your ID, a face scan or a phone number.
- Ads and trackingThere are no ads and no tracking or analytics code in the app or on the site. We don't sell your data to anyone.
- Voice and video recordingVoice calls, cameras and screen shares are not recorded on the server. So that you can report abuse, your device keeps the last 60 seconds you heard in a voice room in its own memory only; it is gone when you leave the room. If you report someone, those 60 seconds go to the team with the report, are stored encrypted, and are deleted once the report is settled.
- End-to-end encrypted callsOne-to-one calls, group calls and private rooms are end-to-end encrypted: voice, cameras and screen shares open only in the apps of those in the call; not even the MODeep server can see them. The key is set up anew between the apps for every call and renewed when someone leaves; if everyone sees the same safety code, nobody is in between. Messages are stored encrypted on the server so they open on all your devices.
- IP addressYour IP address is never written to our database; it is held in memory for a short while only, to stop abuse.
What we keep
- Your accountYour first and last name, username, email address, date of birth and gender. Your password is not stored as such, only as a one-way hash (scrypt).
- Direct messagesStored encrypted on the server with AES-256, like room messages, so your messages wait for you on whichever device you sign in from. The team looks at direct messages only when one is reported or the law requires it. Older messages sent end-to-end encrypted on 3–4 October 2026 open on the device that holds their key; your own ones are moved to the server in the normal form once opened.
- Room messagesStored encrypted on the server with AES-256. The key is kept apart from the database: a copy of the database or a backup cannot be read on its own.
- FilesPictures and videos you send open only for those allowed to see them, through links that stop working after a few hours. Location and camera details are removed from photos when they are uploaded.
- Link previewsThe MODeep server fetches the preview of a link in a message (title, short description, small picture); neither your device nor the devices of those who see the message connect to that site, and your IP addresses do not reach it. The preview is stored encrypted with the message and the small picture as a separate file on MODeep; both go when the message is deleted (apart from a short cache of at most a day in the server's memory for the same link). Write a link inside <…> for no preview.
- GIFsThe GIF button in the message box uses KLIPY's GIF library. As KLIPY's terms require, your GIF searches and the GIF you send go straight from your device to KLIPY, not through the MODeep server; KLIPY sees your IP address while doing so. Your account details (name, username, email) are not sent: KLIPY only sees a fixed identifier made for you that does not show who you are. GIFs sent in a chat also load from KLIPY's servers, so opening a chat with GIFs connects your device to KLIPY. A message keeps only the GIF's link, encrypted like text. If you never press the GIF button, no search reaches KLIPY.
- Game activityThe desktop app compares the game you have open with the games installed on your computer (read from what Steam, Epic Games, GOG, Ubisoft Connect and EA keep on your computer, refreshed when the app starts and every few hours) and with a list of known games. The list of installed games stays on your computer. Only the game's name and how long you have been playing go to your friends and shared servers; the list of your programs never leaves your computer. The server holds it in memory only while you are connected and never writes it to the database; nobody sees it while you are invisible. Turn it off, or hide single games, in Settings → Privacy.
- DeviceTo recognise your trusted devices, a random identifier of your device is kept, as a hash only.
How long we keep it
- Room messages7 days, then deleted.
- Pictures and videos3 days, then the file is deleted and the message says so.
- Voice messagesKept 30 days, then the sound is deleted and the message says it has expired (files 3 days). In rooms they go with the message within 7 days at most. A recording reaches the server only when you send it.
- Direct messagesUntil you or the other person delete them, or the account is deleted.
- ReportsDeleted 30 days after they are settled, together with the copy of the message in them.
- AppealsIf MODeep staff mute or ban your account you can appeal once per decision; your appeal is stored encrypted and deleted 30 days after it is decided.
- If you delete your accountYour account, the servers you made, your messages and your files are deleted. Older copies in backups delete themselves when they expire. If a mute or ban is in force on your account, a one-way trace of your email address (and traces of the devices the ban covers) is kept for that time only; it is applied again to a new account opened with the same address, and deleted when the time is up.
Who can see it
The team sees messages only when they are reported: the reported message and at most 12 messages on each side of it. This is the same for room messages and direct messages. If an older end-to-end encrypted direct message is reported, the reporter's device sends that message and at most five messages before it. Every action is logged.
Official requests
MODeep is run from Türkiye and is subject to Turkish law. If a decision of a competent court or public prosecutor arrives, we may have to hand over the information we have. We cannot hand over older end-to-end encrypted direct messages, because we cannot read them, nor data that was deleted or has expired, because it no longer exists. Voice calls are never recorded, so they can never be handed over; only the 60 seconds of sound attached to an open report exist, until the report is settled.
This is an English translation of the Turkish privacy page; if they differ, the Turkish version applies.
Questions
Can MODeep read my direct messages?
Direct messages are stored encrypted on the server and nobody reads them one by one. The team looks only when a message is reported or the law requires it; every look is logged.
Are voice calls recorded?
Not on the server. Voice, camera and screen sharing only travel to the other side in the moment. So that you can report abuse, your device keeps the last 60 seconds you heard in its own memory; it reaches the team only if you report someone, and is deleted once the report is settled.
Do you ask for my phone number or ID?
No. An email address is enough to sign up.
Can I delete my data?
Yes. Delete your account in Settings → Account; your messages and files go with it.