Privacy Policy

Effective date: October 7, 2026

This page is in English. Short version: we keep what's needed to run the chat, we don't sell or advertise with your data, and you can delete your account.

1. Who runs Lyreto

Lyreto is run by its operator on a server we control, hosted with Oracle Cloud in a data center in the United States. Questions: covenadmin@gmail.com.

2. What we collect

• Account: username, display name, password (stored only as a bcrypt hash), and your email address if you add one (used to verify it and to reset your password).
• Profile: avatar, banner, bio, pronouns, status, decorations and other things you choose to set.
• Content: messages, reactions, polls, uploads (images, files, voice clips), servers, channels and roles you create.
• Connections: if you connect a Roblox account, its user ID, username and display name (and whether to show it on your profile).
• Technical: sign-in sessions (a random token; we store only its hash), and IP addresses in short-lived memory for rate limiting and security. We don't use advertising or analytics trackers.
• On your device: your browser keeps your session token, settings, language and (for encrypted DMs) your private encryption key in local storage/IndexedDB. No tracking cookies.

3. How we use it

Only to run Lyreto: show your messages to the people they're meant for, deliver notifications, keep accounts secure, enforce the Terms and fix problems. We do not sell your data or use it for ads.

4. Direct messages and encryption

1:1 DMs are end-to-end encrypted when both people have encryption keys set up: the text is encrypted in your browser and the server only stores ciphertext. Limits, honestly:

• Only the text of 1:1 DMs is encrypted. Group DMs, server channels, attachments, stickers, polls and reactions are not end-to-end encrypted (they're protected in transit with HTTPS, and stored on our server).
• If the other person has no key yet, messages are sent unencrypted and marked with an open lock.
• Keys live in each browser. A new browser or device can't read older encrypted messages.
• We can see metadata: who messaged whom and when.

Voice and video calls connect peer-to-peer (WebRTC), so people in a call can see each other's IP address. We don't record calls.

5. Who else gets data

• Other users: what you post is visible to the people in that server, channel or DM. Server owners and moderators can manage content in their servers. Lyreto Staff can view and remove content and accounts to enforce the rules.
• KLIPY (GIF search): your search words and a random anonymous ID (never your username) go to KLIPY through our server. GIF images load from KLIPY's servers, so KLIPY sees your IP address when your browser shows them.
• Email: verification and password-reset emails are sent through Google's Gmail SMTP, so Google processes your email address and the message.
• Roblox: if you connect Roblox, we exchange data with Roblox to confirm the account is yours (via “Connect with Roblox” or a code in your Roblox profile).
• YouTube: Watch Together loads YouTube's player, which is subject to Google's privacy policy.
• Link previews: our server fetches pages whose links you post, to show a preview.
• Hosting: Oracle Cloud provides the server; data is stored in the United States.
• The law: we may share data if we're legally required to, or to protect people from serious harm.

6. Retention and backups

• Messages and uploads stay until they're deleted by you, a server moderator, or us, or until your account is deleted.
• Deleting a server deletes its channels and messages.
• Our server keeps rolling database backups (the most recent few) on the same machine to recover from mistakes. Deleted data can remain in those backups until they rotate out, normally within days.
• Sign-in sessions expire; expired and signed-out sessions are removed.

7. Deleting your account

Go to User Settings → My Account → Delete Account. This permanently deletes your account, profile, messages, reactions, 1:1 DMs, memberships and connections. You'll need to transfer ownership of (or delete) any servers you own first. Messages in other people's copies (screenshots, quotes) are outside our control. You can also ask us at covenadmin@gmail.com.

8. Your rights

You can see and change most of your data in Settings, and ask us for a copy, a correction or deletion by email. Depending on where you live (for example the EU/UK or California) you may have additional rights; we'll honour them.

9. Children

Lyreto is not for children under 13. If we learn an account belongs to someone under 13, we delete it.

10. Security

HTTPS everywhere, hashed passwords and session tokens, rate limits, optional two-step sign-in for staff. No system is perfectly secure; tell us if you find a problem.

11. Changes

We'll post updates here with a new effective date, and tell you in the app if a change is significant.