DayJabber Privacy Policy

Introduction

Welcome to DayJabber. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our encrypted communication platform.

Information We Collect

DayJabber is designed with privacy in mind. We intentionally limit the amount of information we collect to only what is necessary for the service to function:

• Account Information:
  • Your display name (which can be a pseudonym)
  • Room passwords (encrypted)
• Technical Information:
  • Browser type and version
  • Device information
  • Connection timestamps
  • Sites click analysis

How We Use Your Information

We use the collected information solely for the following purposes:

• To Provide Our Service:
  • Authenticating users to access chat rooms
  • Facilitating encrypted communication between users
  • Ensuring the proper functioning of collaborative features
• For Security:
  • Preventing unauthorized access to chat rooms
  • Protecting against potential abuse of our platform
  • Debugging and addressing technical issues

Data Storage and Security

Message Storage

• Default Temporary Storage: By default, text messages are stored temporarily in your browser during your session and are not permanently saved on our servers.
• Persistent Storage: When enabled by user, text messages are stored in our system until explicitly deleted by any user in the room.
• User Control: Any user within a room can delete text messages at any time through the interface.
• End-to-End Encryption: All text communication is encrypted end-to-end using the browser's native Web Cryptography API. Each room uses a unique 256-bit AES-GCM symmetric room key. That room key is securely exchanged between participants using Elliptic Curve Diffie-Hellman (ECDH) on the P-384 curve, with the shared secret derived using HKDF-SHA-384, and a unique random IV generated per message. Private keys never leave your device.
• TLS/SSL: File transfer is encrypted during transmission with TLS/SSL, file data is never stored on our systems.
• Password Security: Room passwords are stored using strong, industry-standard encryption algorithms.

Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Regular security assessments
• Limited access to backend systems

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties. We may disclose information only in the following circumstances:

• Legal Requirements: When required to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• Protection of Rights: To protect our rights, privacy, safety, or property, as well as that of our users or the public.

Cookies and Tracking

DayJabber uses minimal cookies that are essential for the functioning of our platform. These cookies are used for:

• Maintaining your session
• Remembering your preferences
• Ensuring security features work properly

We do not use tracking cookies or analytics that follow your activities across other websites.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: We do not store any personal information about you.
• Correction: You cant request correction of inaccurate information, because we do not store any.
• Deletion: Since we do not store any information about you there is nothing to delete. For stored messages, you can delete them directly through the user interface at any time.
• Objection: We don't collect or use your data in any way.
• Control: All users have equal rights to delete messages from chat rooms they participate in.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify users of any material changes by posting the updated policy on our website with a new effective date.

Message Storage Policy

DayJabber operates under a privacy-first approach regarding message content:

• Default No-Log Policy: By default, we do not log, store, or monitor the content of your communications. Messages are transmitted through our servers only to facilitate delivery and are not retained afterward. File transfers are processed through our servers only to facilitate delivery and are not stored afterward.
• Optional Message Storage: This storage is room-specific and requires user activation. All stored messages can be viewed by anyone with access to the room.
• Deletion Rights: Any user in a room can delete messages at any time.
• Immediate Processing: Deletion requests are processed immediately and permanently remove the data.
• File Transfers: File transfers are processed through our servers to facilitate delivery and are never stored.

Conclusion

Your privacy is important to us. We design our platform with privacy at the forefront, collecting only the minimum amount of information necessary to provide you with a secure and reliable communication platform.