Privacy Policy

Last updated: 2026-04-01

The Short Version

We do not collect your data. We do not have your messages. We do not track you. We do not use cookies. We do not use analytics. We do not sell anything because we have nothing to sell.

What We Do Not Collect

• Message content (we never see it -- messages are end-to-end encrypted)
• Sender or recipient identity (sealed sender protocol)
• IP addresses (all connections route through Tor)
• Phone numbers (we do not require one)
• Email addresses (we do not require one)
• Contact lists
• Location data
• Device identifiers
• Usage analytics or telemetry
• Browsing history
• Cookies or tracking pixels

What Our Servers Handle

RVNT servers perform two functions:

• Prekey distribution: Servers store public prekey bundles to facilitate initial key exchange. These are public cryptographic material, not private data.
• Message relay: Servers temporarily hold encrypted message blobs for offline recipients. These are opaque ciphertext. Servers cannot read them and do not know who sent them.

Messages are deleted from the server after delivery. Undelivered messages are deleted after 30 days.

This Website

This website does not use cookies. This website does not use analytics. This website does not load external resources (fonts are self-hosted, no CDNs, no tracking scripts). Server access logs are not retained.

Law Enforcement Requests

If we receive a valid legal order, we will comply to the extent we are able. The extent we are able is effectively zero, because we do not possess the data typically requested. We publish a warrant canary to provide transparency about the legal orders we have and have not received.

Changes

If this policy changes, we will publish the diff. The previous version will remain available. We will not quietly weaken our privacy commitments.

Contact

Questions about this policy: privacy@rvntos.io