Aoraton Chat
Privacy Policy Built to collect as little as possible.
We never sell your data or use it for advertising. Below is exactly what we store, who processes it, what changes when a room is bridged to radio, and what you can ask us to do.
At a glance
End-to-end encrypted
Message and attachment content is encrypted on your device with a key we never receive.
Anonymous by default
Chat anonymously and we store only a random anonymous ID. Google sign-in is optional.
Never sold
We never sell your data or use it for advertising.
Yours to delete
Ask us to access, correct, export or delete your personal data at any time.
A summary for convenience — the full policy below is what applies.
What we collect
Aoraton Chat is built to collect as little as possible. We never sell your data or use it for advertising.
- AccountIf you chat anonymously we store only a random anonymous ID. If you sign in with Google we store your Google account ID, email, name and profile picture, so we can save your rooms.
- Rooms & messagesRoom names, your membership and your messages (including attachments, voice notes, polls and shared locations) are stored on our servers so conversations work across devices. Message and attachment content is end-to-end encrypted: it is encrypted on your device with a key we never receive, so what we store is unreadable to us. Metadata — usernames, timestamps, room names, who is a member and when — is not hidden.
- NotificationsIf you enable them we store a push subscription and/or your choice to receive email alerts. Alerts never contain your message content.
- PaymentsPaid plans are handled by Stripe; we store your Stripe customer ID and current plan, never your card details.
- TechnicalStandard server logs needed to run and secure the service.
We rely on these processors:
- SupabaseHosting, database, file storage
- StripePayments
- GoogleOptional sign-in and the AI assistant
- Infrastructure providersMap tiles, avatar generation, call relay and email delivery
The LoRa mesh bridge
A room can be bridged to a Meshtastic® LoRa mesh by a member who connects a radio to their browser. This changes where your messages go, so it is opt-in per room: the member who turns it on accepts it first, and every member of a bridged room is told on each of their devices before they write there:
- What goes on the airMessages sent in the room while the bridge is on — every member's, and the assistant's replies — with reactions, replies, alerts and shared locations (sent as a map pin with the exact position), plus the sender label the room is set to use (your name on the air, a short prefix of it, or none). Files, voice notes, polls and calls never cross — they have no form a radio can carry.
- It is not end-to-end encrypted there.On the air, Meshtastic encrypts content with the channel's key (AES-128 or AES-256), which every radio on that channel holds. Anyone with the key can read it, wherever the mesh relays it, and the default channel's key is published. A channel with no key, or a radio in licensed (amateur) mode, transmits in the clear. We cannot control who holds a key or who is in range.
- MQTTA Meshtastic channel can be configured on the radio to uplink to an internet broker — decrypted, unless the radio's MQTT encryption is on — and the default public broker feeds public maps. That setting belongs to the radio, not to us; the app reads it and warns you when it is on.
- What we storeMessages heard on the mesh are encrypted with the room key before they are saved, exactly like any other message. The radio's own readings about a message (signal strength, hops, whether it was confirmed) and the node names, positions and sensor values the mesh broadcasts are stored encrypted in the same way. Node positions can identify a place and a person — they are published by those radios, not by us, and they are visible to everyone in the room. The name you choose to carry on the air is stored with your messages, encrypted the same way.
- Who is bridgingWhile your device carries a room, we keep which account and device is bridging it, your radio's node number, its channel numbers and when it last checked in, so the other members' devices know who carries the room. Members of the room can see this. It never includes a channel key, and it is deleted with the room.
- Your radioThe Bluetooth or USB link lives between your browser and your device. We never receive your channel keys.
Your data & your rights
You can ask us to access, correct, export or delete your personal data at any time by emailing info@aoraton.com. On request we delete your account, the rooms you own, your messages and your subscriber records. Rooms can also be set to auto-delete and messages to disappear on a timer — when a room is deleted, its messages and files are removed.
Contact
Questions, data requests and reports:
info@aoraton.comAlso read