Privacy Policy

Effective: July 2, 2026

The honest version: Nexus is self-hosted, has no advertisers, no trackers, no analytics SDKs, and no business model that involves your data. We store what the service needs to function, and nothing else.

What we store

Data	Why	Kept until
Username, email, password hash (argon2)	Your account	Account deletion
Messages & uploads in servers/channels	Delivering and displaying them	You delete them / account deletion
Direct messages	Delivery	Stored end-to-end encrypted — we hold ciphertext we cannot read
Profile (avatar, banner, bio, status)	You chose to show it	You change/remove it
Presence & voice-channel state	Online indicators	Ephemeral (seconds–minutes)
Moderation report snapshots	Evidence integrity (see Guidelines)	Case retention
Server logs (errors, health)	Keeping the service running	Rotated automatically

What we can't see

• DM content. Direct and group messages are encrypted on your device with keys we never possess. This is architecture, not policy — a subpoena for DM plaintext would receive ciphertext.
• Calls. Voice, video, and screen shares are peer-to-peer and DTLS-SRTP encrypted. Call media never touches our servers and is never recorded.

What we never do

• Sell, rent, or share your data with anyone. There are no third-party processors beyond the infrastructure the service runs on.
• Run ads, trackers, fingerprinting, or engagement analytics.
• Train AI on your content.

Your controls

• Delete your account anytime in Settings → Account. It takes effect immediately and permanently removes your account data.
• Delete individual messages and uploads whenever you want.
• Your encryption keys are protected by your password; we store only a blob we cannot open.

Disclosure

We disclose data only when legally compelled by a valid order, and only what actually exists (see "What we can't see"). If permitted, we will tell you it happened.

Changes to this policy are announced in-app. This policy is part of the Terms of Service.