Scope of this document
Sibrel is an independent project. Data-related contact: support@sibrel.net. This document describes the project website and how the software works. Independent hosts have their own operators; read their policies before registering.
The individual operator’s full name, country of operation, applicable legal bases, address for legal correspondence and specific retention periods must be confirmed before this draft takes effect. A brand name does not replace those details.
Data that may be processed
| Category | Purpose |
|---|---|
| Website visits: IP, request time, URL and browser details in infrastructure logs | Page delivery, protection and diagnostics. Contents and retention depend on hosting. |
| Cookie choice and, with permission, website language | Remember the visitor’s decision and language. |
| Account: username, email, password hash, profile, sessions and device details | Registration, authentication, security and account recovery. |
| Messages, reactions, contacts, groups, channels, files and metadata | Communication, synchronization and delivery to participants. |
| Push token and notification data | Deliver enabled notifications to a device. |
| Reports, issue descriptions and attached evidence | Moderation, support and handling requests. |
Who may receive data?
- Conversation participants and operators of participating federated hosts.
- File storage, email, call server and infrastructure providers chosen by the host operator.
- Firebase Cloud Messaging when push delivery is enabled: the code sends notification data, including titles and text.
- ipwho.is when session location lookup is enabled: an IP address is sent to determine a country/city.
- Bots with access to the relevant channels and external services involved in your actions.
We cannot promise that all data always stays on one machine or in one country. The operator must confirm actual providers, countries and transfer mechanisms before public launch.
Retention and deletion
The website remembers cookie choices for up to 180 days; an authorized language preference remains until consent is withdrawn, browser data is cleared or the decision expires. The website has no advertising or analytics tracker of its own.
The messenger retains data to operate accounts and provide delivery and conversation history. Operators must define and disclose retention for logs, requests and backups. No single automatic deletion period is claimed for all data.
Account deletion keeps messages and attachments with an anonymized author. Deletion by one operator does not guarantee deletion of copies saved by recipients. See Account deletion.
Your controls and requests
You can edit your profile and notification settings, end sessions, manage device permissions, withdraw optional website storage permission and initiate account deletion. Send access, correction, deletion and other applicable rights requests to your home host’s operator.
For the project website, contact support@sibrel.net. Identify the affected host and provide a contact method; do not send your password. Proportionate account ownership verification may be needed to protect data. Response deadlines and rights depend on applicable law.
Protection and changes
Access controls, secret hashing and client-side encryption of supported files are used. Their limitations are explained in Security.
This document must be updated when processing changes. Where new consent is required, an existing cookie choice is not consent to new purposes.