Privacy Policy

What We Do NOT Collect

Because of our peer-to-peer (P2P) architecture, the following data never touches our servers, and we therefore cannot view, store, or collect it:

• The content of your chat messages.
• The files you transfer.
• Your audio or video streams.
• Any personally identifiable information from your P2P communications.

All of this data is encrypted and transferred directly between the browsers of connected users.

Information We Do Collect

For users who choose to register for an optional account, we collect and store only the minimum information required for account functionality: your name, username, email address, and account plan ('free' or 'pro'). We use secure methods provided by Firebase Authentication to manage your credentials. If you opt-in to push notifications, we also store the subscription endpoint provided by your browser to deliver these notifications.

How We Use Your Information

Account information is used solely for managing your account, differentiating between free and Pro users, and providing access to our services. Push notification subscriptions are used only to send you alerts you have requested, such as for new messages or completed file transfers.

Cookies, Local Storage, and Advertising

We use Google AdSense to display ads for Free plan users, which may use cookies. You can opt out of personalized advertising in Google's Ads Settings. To enable features like resuming file transfers, we use your browser's `localStorage` to save transfer progress. This data is stored only on your device and is never sent to us. We do not use any analytics cookies.

End-to-End Encryption & Relays

We use the standard WebRTC protocol (DTLS-SRTP) to encrypt all peer-to-peer data. This ensures that only you and the person you are communicating with can see the content. To facilitate connections behind restrictive firewalls, we may use a TURN relay server. When this occurs, your data is still end-to-end encrypted and passes through the relay server without being decrypted, viewed, or stored.

Your Data Rights (GDPR)

If you are a resident of the European Economic Area, you have certain data protection rights. As we only store minimal account data, these rights primarily pertain to that information. You have the right to access, correct, or delete your personal information. You can manage your account and its associated data by logging into your CieloWeb dashboard.

Children's Privacy

Our service is not directed to anyone under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If we discover that a child under 16 has provided us with personal information, we will delete it immediately.

Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.