Privacy Policy

1. Data Controller

Confide ("we", "us") is the data controller for personal data processed through confide.gg and the Confide application.

Contact for privacy inquiries: privacy@confide.gg

2. What We Collect

We collect only what is strictly necessary to operate the service:

• Account data:username, email address, and hashed password.
• Profile data:optional information you choose to add (display name, status, about text, avatar).
• Usage metadata:timestamps of account creation and guild memberships. No behavioral tracking.

Messages, voice calls, and file transfers are end-to-end encrypted with post-quantum cryptography. The server stores only ciphertext it cannot decrypt. We have no technical ability to read your messages.

3. What We Do Not Collect

• No biometric data or identity documents
• No analytics or tracking
• No advertising identifiers
• No cookies beyond authentication
• No message content (encrypted end-to-end)

4. Legal Basis (Art. 6 GDPR)

• Contract performance (Art. 6(1)(b)):processing account and profile data to provide the chat service.
• Legitimate interest (Art. 6(1)(f)):server logs for security and abuse prevention, retained for a maximum of 14 days.

5. Third-Party Processors

We use the following sub-processors:

• Hetzner Online GmbH (Germany):server infrastructure hosting. Data remains in the EU.
• Cloudflare, Inc. (USA):DDoS protection, DNS, and web hosting. Cloudflare is certified under the EU-U.S. Data Privacy Framework. Only network-level metadata (IP addresses, request headers) is processed transiently.
• Klipy:GIF search and delivery. When you browse or send GIFs, requests are made to Klipy's servers. Your IP address and search queries are processed by Klipy in accordance with their privacy policy.

No data is sold or shared with advertisers. No data is transferred to third parties beyond the processors listed above.

6. Data Retention

Account data is retained for as long as your account exists. When you delete your account, all associated personal data is permanently erased within 30 days. Server logs are automatically purged after 14 days.

7. Your Rights (GDPR)

Regardless of where you are located, we grant you the following rights:

• Access (Art. 15):request a copy of your personal data.
• Rectification (Art. 16):correct inaccurate data.
• Erasure (Art. 17):request deletion of your data.
• Restriction (Art. 18):restrict processing of your data.
• Portability (Art. 20):receive your data in a structured, machine-readable format.
• Objection (Art. 21):object to processing based on legitimate interest.

To exercise any of these rights, email privacy@confide.gg. We respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority in your country of residence.

8. Security

All messages are protected by post-quantum end-to-end encryption. Transport is secured via TLS. Server infrastructure is hosted within the EU. We conduct no bulk data collection and store only the minimum data required to operate the service.

9. Minors

We do not ask for your age and we do not collect any age-related data. Every user gets the same minimal data collection described in this policy. Nothing more, regardless of age. If a parent or guardian has concerns, contact us at privacy@confide.gg.

10. Changes

We will notify users of material changes to this policy via the application or email. Continued use after notification constitutes acceptance.