What Weesper collects, what the relay keeps, and for how long.
No phone number, no email address, no name, and no upload of your contacts. Your contact list and your conversations live on your phone.
| Can see | Cannot see |
|---|---|
| Your wallet address and the public keys you publish so others can reach you | The text, files, voice notes or call signalling you send |
| Which address sends to which, and when | Your private keys, wallet or signature |
| Message size, rounded up to a bucket | Your contacts or your name |
| Your IP address, as any server does | Anything inside a message |
Encrypted messages and uploaded files are kept for up to 30 days, then erased (checked hourly). A contact who stays offline longer than that misses what you sent. Published public keys stay so you remain reachable. Messages are not deleted the moment they are delivered.
The relay also keeps an ordinary access log of requests: the time, the endpoint, and the address polling for mail. It is used for debugging and is not shared. It is not currently expired automatically.
Public blockchain RPC nodes when you view balances or send a payment — they can see your wallet address and IP. Google’s public STUN servers when you place a call, to find your network address. This site, to check for a newer version. Diagnostics are sent only when you tap Send in the app, and contain step names, timings and error text — no messages.
No analytics and no cookies. Pages load their fonts from Google Fonts, and the payment tool loads a QR-code script from jsDelivr, so those providers see your IP address when you open them. The site is served through Cloudflare, which sees requests to it as any host’s network does.
Panic wipe removes everything Weesper holds on your phone. Messages you already sent stay on the recipient’s phone. Copies on the relay expire on their own after 30 days.