Privacy
What Brume stores, what it cannot see, and how long any of it lasts.
Last updated 26 August 2026
Your messages
Message content is encrypted on your device before it is sent, and the server stores only the resulting ciphertext — one copy per recipient. We hold no key capable of decrypting it, so we cannot read your messages, and neither can anyone who obtains a copy of the database. This is a property of how the data is stored, not a promise about how we behave.
What the server can see
Encryption hides the content, not the fact of the conversation. To deliver a message the server necessarily knows who sent it, which conversation it belongs to, who the recipients are, when it was sent, and roughly how large it is. It also holds your contacts, groups you belong to, blocks, read positions and public key material. If that metadata matters to you, it is the part to weigh — no messenger can deliver anything without it.
Your account
Sign-in is handled by auth.haloceteki.eu, our own identity server; Brume receives an identifier for you and nothing more. Brume is invite-only, so we do not create accounts from public sign-ups.
Website analytics
This website counts visits without cookies and without any third-party script. Always recorded: the page path, the root domain that referred you (never the full URL), any campaign parameters in the link you followed, your browser's reported language, a coarse device class, coarse browser and operating-system families, the country your IP resolves to, and a short fingerprint of your IP and browser hashed with a secret that rotates daily — enough to count unique visitors within one day, not to follow anyone across days. Only if you accept the banner do we additionally store your IP address as it is and your exact screen size; decline or ignore it and the server discards both regardless of what your browser sends. The banner's answer is the only thing we keep in your browser's storage. If your browser sends Do Not Track, none of it runs and the banner never appears.
How long things last
Messages stay until you or another participant deletes them; self-destructing messages are removed automatically once they expire. For website analytics, an IP address and screen size recorded with your consent are erased after 7 days, leaving an anonymous row behind; the row itself is deleted after 400 days. Both run automatically.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for your account and its data to be deleted. Because message content is encrypted, an export of it is only meaningful from a device holding your keys.
Contact
Questions about any of this, or a request about your data: contact@haloceteki.eu