Privacy Policy

At HOLOKEY, privacy isn't a feature — it's the foundation. This policy explains what data we collect, how we use it, and most importantly, what we don't collect.

1. Data We Do NOT Collect

HOLOKEY is designed to minimize data collection. We do NOT collect:

• ❌ Phone numbers
• ❌ Email addresses
• ❌ Names or usernames
• ❌ Messages or file contents
• ❌ Session keys or encryption keys
• ❌ Contact lists or social graphs
• ❌ Analytics or tracking data
• ❌ Cookies

2. Data We Temporarily Process

The HOLOKEY relay temporarily processes the following data to enable secure connections:

• Room IDs: Random identifiers that expire after 60 seconds
• Commitments: Irreversible hashes of shared secrets
• Ephemeral Public Keys: One-time use keys for key exchange
• Nonces and Proofs: Challenge-response data (deleted after handshake)
• IP Address: Used only for rate limiting (20 requests/minute), not stored permanently

All data is automatically deleted within 60 seconds. No data is written to permanent storage, logs, or databases.

3. How Data Is Used

• Room Creation: Temporary rooms enable peer discovery
• Key Exchange: Ephemeral public keys enable forward-secret encryption
• Rate Limiting: IP addresses are checked temporarily to prevent abuse

4. Data Storage

• Server-side: No permanent storage. All data expires within 60 seconds.
• Client-side: Your device stores a local device secret (browser localStorage). This never leaves your device.
• No backups: We don't back up any user data.

5. Third Parties

HOLOKEY uses Cloudflare Workers and Cloudflare Pages for hosting. These services may process IP addresses and request metadata for network operations. We do not use any analytics, tracking, or advertising services.

6. Your Rights

Since we collect no personal data, there is no personal data to access, correct, or delete. If you have questions, you can contact us at the address below.

7. Children's Privacy

HOLOKEY does not knowingly collect information from children under 13. We do not target or market to children.

8. Changes to This Policy

Any changes to this privacy policy will be posted on this page. We will never start collecting personal data without updating this policy.

9. Contact Information

---

HOLOKEY — Trust exists between people, not in databases.