Privacy Policy
This policy explains how AMoon Eclipse handles data in hosted and self-hosted deployments.
1. Summary
AMoon Eclipse is designed for client-side encryption. Message plaintext is encrypted on your device before it reaches the server. The server is not designed to read your message plaintext, but it may process metadata needed to deliver and secure the service.
2. Data We May Process
Depending on deployment settings, AMoon Eclipse may process:
- account data such as username, display name, and user ID
- email address if enabled for recovery or notifications
- password hashes, not plaintext passwords
- public keys and fingerprints
- encrypted message bundles and attachments
- room, friend, block, invite, moderation, and pending-message metadata
- OAuth identifiers if third-party sign-in is enabled
- TOTP state if two-factor authentication is enabled
- IP address, user agent, timestamps, request paths, and security logs
3. How Data Is Used
Data is used to:
- create and authenticate accounts
- deliver encrypted messages and realtime events
- manage profiles, rooms, friends, blocking, and moderation
- provide recovery and security features
- detect abuse, scanning, and attacks
- maintain and improve the service
4. Sharing
We do not sell your message content or account data. Data may be shared with hosting, database, email, OAuth, TURN, or security providers only when needed to operate the service, or when required by law.
5. Retention
Retention depends on deployment configuration. Typical data is kept only as long as needed for account operation, delivery, debugging, security, or legal obligations.
6. Your Choices
Depending on the deployment, you may be able to update profile data, rotate keys, enable or disable 2FA, block users, or request account deletion.
7. Security
AMoon Eclipse uses end-to-end encryption, password hashing, rate limits, security headers, and abuse-detection controls. No system is perfectly secure.
8. Children
AMoon Eclipse is not intended for children under 13 or below the minimum age required by local law.
9. Changes
This policy may change when the app or service changes. Continued use means you accept the updated policy.
Source: PRIVACY.md on GitHub