Privacy Policy

Last updated: October 31, 2026. This page explains what happens to your chats.

The short version

• You don't need an account. We don't ask for your name, email or phone number.
• Messages, voice notes, photos and files are end-to-end encrypted: they are locked on your device and can only be unlocked by the people in the chat. DiffWeb can't read them.
• When a chat ends, it closes for everyone and is automatically deleted.

Who runs this service

DiffWeb is a product of and operated by Solutionever Technologies, a registered sole proprietorship in India. Contact: our contact form.

End-to-end encryption

• Temporary rooms: your browser makes the room's key when you create it. The key is part of the invite link, after the #. Browsers never send that part to a website, so it never reaches us. If the room has a password, the key is also mixed with the password. Anyone who has the full link (and the password, if there is one) can read the room, so share the link only with people you trust.
• Saved Rooms, Anonymous Chat and Private Circles: each device you use makes its own key pair, and the private half never leaves that device. Each chat has a key that is locked separately for every member's devices. When someone joins, leaves or adds a device, the chat gets a new key. Members see a notice when someone's security key changes.
• New devices and backups: a new device can't read older messages until one of your other devices shares them, or you enter your backup code. The backup code is made on your device and shown only to you. We store only a locked copy that your code opens, so we can't reset it or read it.
• What is end-to-end encrypted: message text, replies, voice notes, photos, videos, files and their names, circle posts, comments, poll questions and answers, and plan names and places.
• What is not: so the service can work, we can see room and circle names, display names and usernames, who is in which chat, when messages are sent, the rough type and size of files, reactions, likes, votes, plan dates, and network data. These are still stored encrypted on our servers, but our system can read them.
• Reports: if you report a message, chat or post, your device sends us the messages you are reporting (the reported message and up to 4 before it, or the last 5 messages of the chat). Each one is checked against a fingerprint saved when it was sent, so a report can't contain made-up messages. We can't see anything else in the chat.
• Chats created before end-to-end encryption was added keep their older messages protected by our server-side encryption. New messages in them are end-to-end encrypted once every member has opened DiffWeb on an updated device.
• Encryption protects your messages on our servers and on the way. It can't protect a device that someone else can unlock, a screenshot, or a person in the chat who shares what you sent.

What we collect

• Chat content: messages, voice notes, photos, files and their names, end-to-end encrypted (see above). Room names and display names are stored encrypted on our servers.
• Join requests: when you ask to join a room without a password, the name you enter is stored encrypted and shown to the room owner. Unanswered requests expire after 10 minutes.
• Reactions, replies and mutes: which emoji was used on which message, which message a reply quotes, and whether the owner muted someone. Used only to show the chat.
• Room metadata: creation, expiry and closing times; message and file counts; file sizes and types. Stored in readable form so the service can operate.
• Network data: your IP address is recorded, stored encrypted, and used for security, rate limiting, abuse prevention and enforcing removals. The copy kept with a chat is deleted together with the chat.
• Security log: Indian law asks online services to keep security records. We log when someone signs up, signs in, creates or joins a room, sends a file, posts in a circle, adds a device or sends a report, with the IP address, browser and time. The log never contains messages or other content. It is stored encrypted, used only for security, abuse investigations and lawful requests, and deleted automatically after 180 days, unless a legal order requires us to keep a specific record longer.
• Microphone: used only while you record a voice note, and only after you allow it in your browser.

Saved Rooms accounts

• What we keep: your username, a hashed password, a hashed recovery code, an optional hashed security code, and your IP address (stored encrypted) for security and abuse prevention.
• Your chats are end-to-end encrypted and kept until you delete them or delete your account.
• Device keys: for each device we store its public key, a name like "Android · Chrome", when it was added and last used. Remove devices any time in Settings → Devices. A device not used for 60 days is removed automatically.
• Private Circles: posts, photos and comments are end-to-end encrypted and shown only to members. Your profile (avatar, username and bio) is visible only to people who share a circle with you. Reported posts may be removed. A circle nobody opens or posts in for 6 months is deleted automatically with its content.
• Secret Share: no account is needed. Your browser encrypts the secret before it is sent, and the key stays in the link after the #, so we store only scrambled data. We keep it until it has been opened the number of times you chose or its timer ends, then delete it within about 10 minutes (the short delay lets the last person report it if it is harmful). To stop abuse and answer valid legal requests, we keep the creator's network address (stored encrypted) with the secret while it exists, and a security log entry. If someone reports a secret, their browser sends us its key so we can check it, and we keep it for up to 30 days for review. What you shared is remembered only in your own browser. Time Capsules work the same way, except we hold back even the scrambled data until the opening time you chose, and then keep it for 30 days. If you ask us to email a capsule to someone, we email them when you seal it and again when it opens, and keep their address and the link (stored encrypted) until that second email, then delete them. While we hold the link we could technically open that capsule, which is why this option is off unless you choose it. Schedule Message works the same way: your browser encrypts the message, and we keep the recipient's address and the link (stored encrypted) until the time you chose, email it once, then delete both. Until then we could technically open that message. The key and a private edit code stay in your browser (and in the edit link you can copy), so you can change or cancel it before it is sent. Anyone can stop these emails with the link in the email; we then keep only a one-way code of their address so we don't email it again.
• Anonymous Inbox: if you turn it on, anyone with your link (diffweb.com/m/your-username) can send you a message without an account. The sender's browser encrypts the message for your devices, so we store only scrambled text; you can delete any message at any time. We never show you who sent a message. To stop abuse and to answer valid legal requests, we keep the sender's network address (stored encrypted) and a random browser identifier with each message for up to 180 days, and a security log entry like for other actions. If you report a message, your device sends us the key for that one message, so we can check and keep a verified copy for our safety team.
• Anonymous Chat: only members who choose to search, or who turn on chat requests, can be matched. We keep your chat profile (the name you chose and, if you add it, male or female, which is used only for matching and never shown to anyone) and up to 3 interests, so we can find a match. You can change them any time. A match opens only if both people accept. The chat is end-to-end encrypted and deleted when either person ends it, unless you both choose "Stay in touch". Blocking someone stops future matches with them.
• Email notifications (optional): if you turn them on, we store your email address encrypted and use it only to tell you about new messages while you are offline. Emails never contain message text. Turn them off in Settings or with the link in any email, and the address is deleted.
• Inactive accounts: an account not signed in to for 3 months is deleted automatically, and it leaves all its chats.
• After an account is deleted: as Indian rules require, we keep a sealed record of the username, sign-up date and last IP address for 180 days, then delete it. It contains no chats or messages and is opened only for a lawful request.
• Deleting a chat removes it from your list. A chat everyone has left is closed and then permanently deleted.

File Requests

• File Requests: no account is needed. Your browser makes a key pair; we store only the public half. Files people send are encrypted in their browser for that key, so we store only scrambled data, plus each file's size and time. The key that opens them is in your private link, which never reaches us; if you lose it, nobody can recover the files. To stop abuse and answer valid legal requests, we keep the network address (stored encrypted) of whoever made the request and whoever uploaded each file, for as long as the files exist. Requests and their files are deleted 3 days after they end, or straight away when you delete them.

Notifications

• Push notifications (optional): if you turn them on for a device, your browser gives us an address at its push service (Google, Mozilla, Apple or Microsoft) and we store it with your account. When you have new messages and aren't on DiffWeb, we send an empty push to that address. Your device then asks us how many new messages you have and shows that. The push services never see any message content or who wrote to you. Turn it off any time in Settings; deleting your account removes these addresses.

Visit statistics

• We count visits to our public pages as daily totals: country (worked out from your network address, which is not stored for this), device type, browser, operating system, page and the website that linked to us. No cookies are used for this, and none of it identifies you.
• We also count, as daily totals, how often each feature is used (for example rooms started, messages sent, secrets made or songs played in SyncPlay) and which kind of device or app DiffWeb runs on. These are plain numbers: never what was said, shared or played, or who with.
• To know how many accounts are active each day, week and month, and how many come back, we store a keyed hash of the account number for each day it was used. It can't be turned back into your account by anyone without our secret key, and it's deleted after 120 days.
• Our public pages (not rooms or accounts) also use Google Analytics to understand traffic. Google's own privacy policy applies to that data.

Cookies and storage on your device

• Cookies: strictly necessary cookies that keep you inside a room you joined, mark you as the room owner, track a pending join request, keep you signed in to your account, and protect forms. One random cookie (not linked to your account or name) lets our fair-use limits count per browser, so people who share an internet connection don't block each other. No advertising or tracking cookies. No analytics.
• Browser storage: your light/dark theme choice, sound on/off, recently used emoji, and your encryption keys (your device key and the keys of temporary rooms you joined) are saved in your browser only. Your private keys never leave your device. Clearing your browser data removes them.
• Installed app and saved chats: if you install DiffWeb, the site's design files (styles, scripts, icons) are cached so it opens quickly. For saved chats and circles you're signed in to, the latest messages are also kept on your device in their encrypted form, so a chat opens straight away; they can only be read with your keys, which never leave your device, and signing out removes them. Temporary rooms are never stored.

How long we keep data

• Chats are permanently deleted automatically a short time after they close: messages, voice notes, files and the room's keys.
• Unsent messages: when you unsend a message, its text is wiped and any file is deleted from our server at once.
• A chat may be kept longer only if it is reported or the law requires it. Even then, its end-to-end encrypted messages stay unreadable to us, except what a reporter shared.
• Backups: our hosting backups may contain deleted data until those backups expire. Backup data is not used for any other purpose.

Security

End-to-end encryption uses standard, well-reviewed methods built into your browser (Web Crypto): AES-256-GCM for content, ECDH P-256 with HKDF for sharing keys between devices, and PBKDF2 for the backup code. On our servers, everything is also encrypted at rest. No system is perfectly secure, but we design DiffWeb so that a break-in at our servers would not reveal your messages.

No illegal activity

Solutionever Technologies does not support, allow or take part in any illegal activity. DiffWeb must not be used to share, plan or promote anything that breaks the law, including child sexual abuse material, terrorism, threats, harassment, fraud, scams, drugs or weapons trading, hacking or malware.

• Users alone are responsible for what they send. Sending illegal content is a breach of our Terms.
• When we receive a report or become aware of a breach, we may close rooms, delete content, suspend or delete accounts and block networks, without notice.
• We cooperate with law enforcement and courts as required by Indian law, including the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. This can include preserving and providing information we hold (such as the security log) when we receive a valid legal request. We can't provide the content of end-to-end encrypted messages because we don't have the keys.
• Child sexual abuse material is reported to the relevant authorities.
• To report something, use the report option inside a room or our contact form.

Sharing

We do not sell or rent data, and we do not share it with advertisers. We disclose information only when required by law, such as a valid order from a court or government authority in India, or to protect people from serious harm.

Age

DiffWeb is for people aged 18 and over. We do not knowingly allow children to use the service. If you believe a child is using it, report the room or use our contact form.

Your choices and rights

• End or leave a room at any time. Your access stops immediately.
• Unsend your own messages at any time while the room is open.
• Delete your account at any time in Settings, or on our account deletion page without the app. It explains exactly what is deleted.
• Report abuse from inside any room (menu → Report) or through our contact form.
• To ask about data relating to a specific room, or to exercise your rights under applicable data protection law (including India's Digital Personal Data Protection Act, 2023), contact us with the room link. Because rooms are anonymous, we may be unable to verify that a room is yours.

Grievance Officer

For complaints about content or about how your data is handled, contact the Grievance Officer of Solutionever Technologies at our contact form. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

Changes

If we change this policy we will update this page and the date above.