Privacy Policy — S Mesh

Last updated: August 17, 2026

S Mesh ("the app") is a serverless, peer-to-peer group chat application. This policy explains what data the app touches and, just as importantly, what it does not collect, because there is no backend server operated by the app that stores or has access to your messages.

How S Mesh works

S Mesh connects you directly to other participants in your chat room using WebRTC, a peer-to-peer protocol built into web browsers and Android's WebView. Messages, voice notes, images, and files travel directly between participants' devices. No message content is ever sent to, or stored on, a server we control.

Information stored on your device

The following is stored only in your device's local browser storage (localStorage), never transmitted to us:

• Your chosen display name, room name, and room PIN
• Chat history for rooms you've joined, automatically deleted after 24 hours
• Your light/dark mode preference

Uninstalling the app, or clearing the app's storage, permanently deletes this data. We cannot recover it because we never had a copy.

Third-party services used to connect peers

Because two devices on the internet generally can't find each other without help, S Mesh relies on:

• PeerJS Cloud (peerjs.com) — a public signaling/broker service used only to help two devices discover each other's network address so they can form a direct connection. This service can see your device's IP address and a temporary connection ID, but not your messages, files, or chat content.
• Giphy API — if you use the in-chat GIF search feature, your search text is sent to Giphy to fetch results. This only happens when you actively use GIF search.

Permissions the Android app requests

• Internet — required to establish peer-to-peer connections.
• Microphone — only used when you press-and-hold to record a voice message. Audio is sent directly to peers in your room, never to us.
• Location — only used when you explicitly tap "Share Location" in a chat. Your coordinates are sent directly to peers in your room, never to us.
• Notifications — used to alert you to new messages while the app is running.

None of these permissions are used to collect data for us — they exist solely so the app can send that data directly to the other people in your chat, at your explicit action.

What we don't do

• We don't operate a message server, so we cannot read, log, or sell your conversations.
• We don't use analytics, advertising, or tracking SDKs.
• We don't require an account, email address, or phone number to use the app.

Security note

Message history stored in localStorage is not encrypted at rest. Anyone with physical access to an unlocked device could read it. Room access is protected by a PIN checked by the room host's own device, not by a central authority — treat rooms as private-but-not-bulletproof, similar to a shared group chat link.

Children's privacy

S Mesh is not directed at children under 13, and we do not knowingly collect information from children under 13.

Changes to this policy

If this policy changes, the updated version will be posted at this same URL with a revised "Last updated" date.

Contact

Questions about this policy can be sent to [email protected].