Whisperoni.

Effective June 15, 2026

Whisperoni is built to know as little about you as possible. There are no accounts, no names, no phone numbers, and no email addresses. Your conversations are end-to-end encrypted — we cannot read them, and we never sell or share your data.

Who we are

Whisperoni ("we", "us") is an anonymous, end-to-end-encrypted chat app available on the web and as native iOS and Android apps. This policy explains what little data exists, where it lives, and how it is handled.

No accounts, ever

You do not register, log in, or provide any personal identifier. Your identity is a cryptographic key pair (P-256) generated on your device, plus a per-chat handle that you choose and can change for each chat. We have no way to tie a chat to a real-world person.

Your messages are end-to-end encrypted

We cannot read your chats. Messages are encrypted on your device (ECDH key agreement + AES-GCM) and can only be decrypted by you and the person you paired with. Our servers only ever relay ciphertext they cannot decrypt.
Private keys never leave your device. They are stored locally (in the app's secure on-device storage) and are never transmitted to us.
Media you send in a chat (photos, video, voice) is also encrypted on your device before upload and is stored only as encrypted bytes.

What is stored, and where

On your device: your private keys, your chats and their messages, and your chosen handles. This is the durable copy. Uninstalling the app or using the in-app "wipe everything" removes it.

On our servers (Cloudflare): only what's needed to relay an encrypted conversation — your public key, short-lived pairing codes, and encrypted (unreadable) message bytes held briefly until your recipient's device collects them. We never store plaintext.

The public discovery board (/qrs)

Whisperoni includes an optional public board where you can post an anonymous "calling card" for others to start a chat with you. This content is public by design. If you choose to post a card, the following is visible to anyone using the board:

The handle, text, and any photo / video / voice you put on the card.
An approximate country, derived from your network connection at post time, and an optional city that you type in yourself. We do not collect precise GPS location for the board.

Cards are ephemeral — they automatically expire (within hours) and their media is deleted from storage when they expire, are claimed, or are withdrawn. You can withdraw your own card at any time.

Location

Precise location is used only if you explicitly tap "share location" inside a chat, to send your current spot to that one person (encrypted). It is never collected in the background. The board uses only a coarse, network-derived country plus any city you choose to type.

Notifications

The current version does not send push notifications and does not register a push token. New messages are delivered when you next open the app. If we add notifications in the future, this policy will be updated; any notification would be a generic "new message" alert and would never contain your message content.

Keeping the public board safe (moderation)

Because the board hosts user-generated content, we provide tools to keep it safe and we act on reports:

Report — any card can be reported. Reported content is reviewed and removed, and content flagged as child-sexual-abuse material is removed immediately.
Block — you can block a poster so their cards no longer appear for you.
Community guidelines — posting requires accepting our zero-tolerance terms for objectionable content. Offenders are ejected.
We aim to act on reports of objectionable content within 24 hours. To report abuse, email abuse@whisperoni.com.

Data retention & deletion

Chats live on your device until you delete them. Ending a chat ("dissolve") destroys the server's record of it on both sides.
Encrypted relay data is transient — held only until delivered, then removed.
Board cards auto-expire within hours; their media is deleted on expiry.
"Wipe everything" in the app removes all local data and asks the server to destroy its copy of your chats.

Third parties

Our infrastructure is hosted on Cloudflare (Workers, Durable Objects, R2, KV), which processes encrypted traffic and stores the limited data described above on our behalf. We do not use third-party advertising or analytics SDKs, and we do not sell or share your data.

Children

Whisperoni is not intended for anyone under 17. It enables anonymous contact with strangers and hosts user-generated content, and is rated accordingly. Do not use Whisperoni if you are under the minimum age in your jurisdiction.

Your choices

Because there is no account, the strongest control is in your hands: choose what (if anything) to post publicly, block or report others, end any chat, and wipe all data at any time from within the app.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with a new effective date.

Contact

Questions or abuse reports: abuse@whisperoni.com.

Whisperoni — chat without the noise. · Open the app