Privacy Notice

Last updated: 20 July 2026

CyberChat is built to know as little about you as possible. We hold no accounts and store no messages. This notice explains what is and is not processed, in plain language, and your rights under the Protection of Personal Information Act 4 of 2013 (POPIA).

What we do not collect

• Message content. Messages are end-to-end encrypted on your device. Our relay only passes encrypted data between two people and cannot read it. We never see or store the content of your conversations.
• Accounts. There is no sign-up, no email, no phone number, no password held by us.
• Message history. Our relay stores no messages. It holds nothing to disk about your conversation.
• Tracking. We use no advertising, no analytics, and no tracking cookies.

What is necessarily processed to route a chat

To connect two people, our relay and our hosting provider process the following while a connection is live. This is connection metadata, not message content:

• your public identity key, which is a stable identifier for your current identity;
• which identity you are connecting with, and when;
• your IP address;
• the size and timing of encrypted messages.

Our relay keeps this only in memory for the duration of a connection and does not write it to storage. However, our hosting and network provider, Cloudflare, processes your IP address to deliver the service and may keep operational and security logs under its own policies. This means CyberChat is not network anonymity: it protects the content of your messages, not the fact that you are talking to someone.

What is stored on your own device

The following is kept in your browser, on your device, under your control:

• your identity key (unless you chose a temporary identity, which is never saved);
• your contacts and the private nicknames you give them;
• your block list;
• a record that you accepted these terms.

You can erase all of this at any time using "Forget this identity" in the app, or by clearing your browser storage for this site.

Third parties

• Cloudflare hosts the website and runs the relay network. It processes your IP address to deliver the service.
• Email. If you send us an abuse report by email, we receive whatever you choose to include, at abuse@cybercell.co.za.

Your rights under POPIA

You have the right to ask what personal information we hold about you, to have it corrected or deleted, and to object to its processing. Because we hold no accounts and store no messages, in most cases we hold nothing about you that we could return. To make a request, contact us at the address below.

Children

CyberChat is not intended for anyone under 18. We do not knowingly process the information of children.

Changes

We may update this notice. Material changes will be reflected by the date above and, where appropriate, by asking you to re-accept our terms.

Contact

Privacy questions and POPIA requests: abuse@cybercell.co.za.