Privacy Policy

How onitalk Works

To understand why onitalk is so private, it's important to know how the technology works:

What Data We Collect

In short: We don't store any data.

• No video content: Your video chats are never stored or processed on our servers.
• No chat messages: Text messages are transmitted directly between participants.
• No user accounts: You don't need to register, so we don't store any profile data.
• No room histories: We don't know which rooms exist or who participates in them.
• No logs: We don't store any logs since the whole signaling proccess is handled decentralized.

Password-Protected Rooms

For password-protected rooms, security works entirely locally:

• The password is converted into a cryptographic key using PBKDF2 (100,000 iterations)
• The room ID is derived from the key hash (not the password itself)
• Kick commands are signed with HMAC-SHA256 and verified locally by all participants
• Neither the password nor the key ever leaves your browser in plain text

Cookies and Local Storage

onitalk uses minimal local storage for user settings such as theme preference (light/dark). We do not use tracking cookies, no third-party analytics tools.

Third Parties

onitalk uses the following technologies:

• Trystero: For decentralized signaling via BitTorrent trackers (these are public trackers and only see anonymous connection requests)
• WebRTC: For peer-to-peer video/audio connections (standard browser technology)

Your Rights

Since we store practically no personal data, there is nothing to delete or export. This is intentional - Privacy by Design. If you have questions about your data, feel free to contact us.