Privacy Policy
This is the shortest privacy policy you'll ever read. Because there is almost nothing to collect — and nothing is kept.
No accounts
No email, no phone number, no username, no password. You don't exist in our system.
No data collection
No analytics, no cookies, no tracking pixels, no fingerprinting. We don't know who you are, where you came from, or what you did.
No message storage
Messages are encrypted end-to-end in your browser (ECDH P-256 + AES-256-GCM). The relay holds only encrypted blobs in memory while a conversation is live — nothing is written to disk. Close the tab and everything is destroyed.
No stored logs
Nothing is written to disk. There are no access logs, message logs, or history. To operate the relay, we must briefly hold your IP address and connection time in memory only while your room is active. This data is used solely for routing messages and basic per-room rate limiting. It is never written to disk and is deleted the moment the room ends.
What the relay can and cannot see
The relay cannot read your messages or voice notes — they are encrypted end-to-end and the keys never leave the two browsers. The relay can see that two addresses are connected, when, and roughly how much data passes between them. It cannot see who you are or what you said. All of this exists only in memory and disappears when the connection ends. To hide connection metadata as well, use Tor Browser.
Third parties
None. No third-party scripts, no CDNs, no external fonts, no analytics APIs. Everything runs from our server and your browser.
Relay location
Helsinki, Finland, EU (GDPR). Hosted on Hetzner. Operated by Particular Ltd.
Threat model — what Arnon protects, and what it doesn't
Arnon is built for conversations more private than WhatsApp or Telegram. Those platforms hold the conversation itself — your messages, voice notes, and who you talk to. Arnon holds none of it: the chat is end-to-end encrypted, nothing is stored, and nothing remains after you close the tab.
One thing Arnon can't control: how you send the link. Sharing it over a normal channel (a text, WhatsApp, email) lets that channel see that a link was shared — but never the conversation. So the worst case is far better than chatting on those apps directly.
The relay can never read your messages. It does see that two addresses are connected, when, and roughly how much. To hide that too, use Tor Browser.
Honest limit: because the app loads fresh in your browser each time, you trust whoever serves it. Against an adversary who can compromise the server, DNS, or TLS and target you specifically, an installed, independently verified client (Signal, SimpleX) is stronger. Arnon is built for low-friction, identity-free privacy — not for surviving a targeted server compromise.
IP anonymity
For full IP anonymity, use Tor Browser. Voice notes may not work in Tor Browser.
Open source
Don't trust this page — read the code. The entire application is open source.
Contact
Questions about privacy? Open an issue on GitHub.
Last updated: June 2026