Privacy Policy

This Privacy Policy applies to the Nixvoid platform ("we," "our," or "the Platform"). By accessing or using our real-time, zero-knowledge anonymous messaging services, you explicitly agree to the policies surrounding data collection, routing, and processing detailed herein.

1. Principle of Zero Data Collection (No PII)

Nixvoid is architected on the absolute principle of anonymity. We do not require, collect, or store any Personally Identifiable Information (PII). This means:

• No user registrations or accounts.
• No collection of email addresses, phone numbers, or social media bindings.
• No user tracking mechanisms or persistent digital footprints.
• All UI customizations and privacy preferences (like Ghost Mode) remain strictly on your local device and are never sent to our servers.

2. Ephemeral Storage & The 10-Second Auto-Delete Clause

We are a volatile-only messaging infrastructure. Nixvoid employs a strict 10-Second Ephemeral Self-Destruct protocol.

Once a message is rendered and unveiled by the recipient, a local and server-level synchronized timer is initiated. After exactly 10 seconds, the message is permanently and irretrievably deleted from:

• The recipient's screen (DOM structure).
• The sender's screen.
• Our centralized signaling fallback servers (Google Firebase).

3. Peer-to-Peer (P2P) Routing and IP Address Exposure

To provide high-speed, direct connection capacities, Nixvoid prioritizes WebRTC-based Peer-to-Peer (P2P) data channels. When a P2P tunnel is established:

• Your encrypted data flows directly to the recipient without passing through our intermediary databases.
• Critical IP Disclaimer: Establishing a direct P2P tunnel fundamentally requires your public IP address to be exposed to the recipient. If absolute network anonymity is required, we strongly mandate the utilization of a trusted Virtual Private Network (VPN) while accessing Nixvoid.

4. Fallback Signaling & Third-Party Processors

In cases where strict network topologies (e.g., restrictive NATs or Corporate Firewalls) prevent direct WebRTC connections, Nixvoid automatically routes encrypted packets through our secondary infrastructure:

• Google Firebase Realtime Database: Used as a transit layer. Messages routed through this tier remain cryptographically locked and are instantaneously deleted within the 10-second ephemeral window.
• Google reCAPTCHA Enterprise / App Check: Integrated securely to prevent bots, automated scripts, and distributed denial-of-service (DDoS) attacks against our infrastructure. These protocols evaluate request telemetry without analyzing message payload.

5. Law Enforcement & Subpoenas

Nixvoid operates on a strict "Zero-Knowledge" and "Zero-Storage" framework. Consequently, if we receive subpoenas, warrants, or legally binding requests from law enforcement agencies, we are mathematically and structurally incapable of providing any chat histories, IP logs (for standard users), or user identities, because no such data exists on our servers.

6. GDPR, CCPA, and Global Data Rights

Under international privacy laws (such as GDPR in Europe or CCPA in California), users have the right to request access to or deletion of their personal data (DSAR). Because Nixvoid intentionally collects absolutely zero Personally Identifiable Information (PII) and maintains no databases of user activity, these requests are technically impossible to fulfill. Your data is yours, and it remains solely on your device.

7. Modifications

We reserve the right to amend this Privacy Policy at our discretion. However, our core commitment to Zero-PII and End-to-End Encryption shall remain mathematically absolute and unalterable.

8. Contact Us

For any privacy-related inquiries or vulnerability reports, please use the Contact Support option in the Nixvoid application sidebar.