Angaara What we store
Your account and messages live on your Matrix homeserver, not with us. Angaara's own server runs on Cloudflare and keeps only what the features below need.
What Angaara's server stores
| Feature | What's stored | What's not |
|---|---|---|
| XP | Your Matrix ID, your member number (the order you joined in, used for the Early Ember badge and launch boosts), XP total, when you were first and last active, daily limit counters, and the chat the XP bot uses to message you. | Message text. To count XP, the app sends the IDs of messages you sent. The server may check a few of them to confirm you sent them, and doesn't save the IDs. |
| Crash reports | The error, the page it happened on (with room, user and message IDs removed), the app version, your browser, and your note if you wrote one. | Your account, user ID, rooms or messages. |
| Bug reports | Your type, title and description, the app version, and your browser. | Your account, user ID or rooms. |
| Spam limits for reports | A hash of your IP address and how many reports came from it in the last hour, only to stop report spam. | Your IP address itself. |
| Link and file checks | A hash of your account ID and how many checks you've used, for the limit (20 every two months, 300 for supporters). | The links you check, or anything about your files. Files are scanned on your device, and only their fingerprint is looked up. |
| GitHub sign-in | Nothing. The server swaps GitHub's sign-in code for a token and hands it straight to your browser. After that, your browser talks to GitHub directly. | Your GitHub token or code. |
| Ban appeals | Nothing. The appeal bot reads a server's appeal settings when you need them. Appeals themselves are Matrix chats between you and the mods. | Your appeal messages. |
Developers delete crash and bug reports once they're dealt with, and only the newest 2,000 of each are kept.
Private mode
Want nothing to go to Angaara's server at all? Turn on Settings → Account → Disable pinging our Cloudflare Workers. The app will then only talk to your Matrix homeserver.
| Keeps working | Turned off |
|---|---|
| Messages, rooms, servers and DMs Calls End-to-end encryption, verification and key backup Your profile, settings and server levels | XP, levels and the XP bot Ban appeal checks through the appeal bot GitHub linking in Developer Tools Crash reports and bug reports |
The app blocks these requests on your device before they're sent, so nothing reaches us. The app's own files still load from angaara.app when you open it, like any website. Private mode is saved per device, so turn it on in each browser you use.
Deleting your data
Settings → Account → Delete My Data permanently deletes everything Angaara's server keeps about your account: your XP, level, member number and Early Ember badge. The XP bot also leaves its chat with you. Private mode turns on afterwards, so nothing new gets saved.
Crash and bug reports aren't included, because they're anonymous and nothing links them to you. Your Matrix account and messages live on your homeserver and aren't affected.
How the server knows it's you
For features like XP, the app gets a short-lived OpenID token from your homeserver. It only proves your Matrix ID. It can't read your messages or act as you, and it expires quickly.
On your device
- Your sign-in session and settings are saved in your browser's storage.
- Your encryption keys and message cache are saved in your browser's database. Signing out clears them.
- GitHub: if you link it, the token stays in your browser, and signing out of GitHub in Angaara asks GitHub to revoke it.
What we never do
- No ads, and no selling or sharing your data.
- No analytics or third-party tracking scripts in the app.
- No reading your messages. Angaara's server never sees them.
Cloudflare, which hosts Angaara's server, handles network traffic, and your homeserver has its own privacy policy. For matrix.org, see the matrix.org privacy notice.