Privacy

Applies to LESSRAM 0.1.x

LESSRAM is a communication app. It stores what it needs to deliver your messages and nothing it does not.

What the server stores

• Your account — username, an optional avatar character, and your password as a scrypt hash. The password itself is never stored or logged.
• Your messages — text and any files you attach, so they can be delivered and shown in history.
• Your servers, channels and friends — the structure needed to route messages.
• Sessions — a hashed session token per signed-in device, so a database leak cannot be used to sign in as you.

What it does not store

• Voice and video are never recorded, and never pass through the server. Audio and screen shares go directly between participants. The server only introduces you to each other.
• No analytics, no telemetry, no crash reporting, no advertising identifiers.
• No contact list imports, no address book, no tracking across sites.
• The website sets no cookies and loads no third-party scripts or fonts.

Who can see your messages

The people you sent them to, and whoever operates the server you connect to. Messages are encrypted in transit (HTTPS and WSS) but are not end-to-end encrypted, so a server operator can read them. If that matters for what you are discussing, use something built for it.

Relay servers

When a direct peer-to-peer connection cannot be established — usually because of restrictive NAT — voice and screen data are relayed through a TURN server. The relay forwards encrypted media; it does not store it.

Updates

The app asks the update server whether a newer version exists, on launch and every six hours. That request carries no identifier beyond what any HTTPS request carries.

Deleting your data

Deleting a message removes it, and removes any file attached to it. For account deletion, contact whoever operates your server.