Privacy

Klyro stores as little as possible. Without an account: a random device id (kept in your browser) and its first-use time for the trial period. With an account: your username and a salted SHA-256 digest of your password – we never store your password in readable form.

For temporary rooms (30 minutes, 1 hour, or the "deleted when everyone leaves" type), the contents – messages, drawings, notes, stickies – live only in server memory and are destroyed for good when the room ends. Permanent rooms are stored on disk so they survive a restart; they are destroyed when the room is deleted. Uploaded files are stored with unguessable random ids and removed when the room is deleted.

We do not store your IP address in readable form. Only in case of a serious violation (automatic ban) do we keep an irreversible hash of it so the ban can persist.

Severe profanity is starred out automatically and spam is filtered. Violations earn penalty points; 2000 points triggers an automatic ban. Admins can view and reset the points.

Klyro uses no tracking cookies, ads or analytics. We use your browser's local storage and a language cookie to keep your settings (language, nickname, session).

You can permanently delete your account any time in the Account page – this removes all your data.