Privacy Policy

Last updated: November 8, 2026

Bisik is built on one principle: we can't hand over, sell, or leak the contents of your conversations because we never have them.

What we don't collect

There are no accounts and no sign-up, so there is no name, email address, phone number, or password to store. There is no database. No analytics, no ads, no third-party trackers.

Message and image contents

Messages and images are encrypted in your browser before they are sent. The relay server only forwards that encrypted output from memory (RAM) to the person you're talking to — it never writes it to disk, never logs it, and never queues it. If the other person is offline, your message is discarded on the spot. Chat history exists only in the open tab; closing or refreshing the page erases it.

Your code

Your shared code is never sent to the server. What is sent is only the room id — a slow derivation (PBKDF2) of the code, so the server can pair up two people using the same code without the id being practical to reverse into the code itself. The encryption key is derived and used only inside your browsers.

What is stored on your device

If you install Bisik as a PWA, your browser caches the app's files (pages, styles, icons) so it opens quickly. Conversation contents are never part of that. Bisik does not use localStorage, sessionStorage, IndexedDB, or cookies to store chat data.

The honest limits

For a connection to happen at all, your IP address is necessarily visible to the network and to the hosting provider the relay runs on (currently Render), just like any website. The hosting provider may keep standard network logs on their side, which are outside this app's control. What we can guarantee from the app's side: message contents are never logged or stored anywhere.

Contact

Privacy questions can be sent via the contact page at ednasalam.com.