Your data

Your data lives in two places. sblurp.chat keeps your account. Each community server keeps its own messages and files. Different people control each one.

What sblurp.chat stores

• Your email address, your username and a hash of your password. A hash is a one-way scramble. The password itself is not stored.
• Whether you confirmed your email, and the two age answers: over 13 and over 18. If you are under 18, it keeps the date that you turn 18. It does not keep your date of birth.
• Your profile: display name, pronouns, bio and avatar.
• Your two-factor secret, sealed with a server key, and hashes of your recovery codes.
• For each passkey: its public key, its name and when you added and last used it.
• For each sign-in: when it started, when it was last used, the last IP address and the browser.
• Your old usernames, held for you for 90 days.
• The appearance choices of the app, and the addresses of the communities you added to it, in your order.

A sign-in ends after 30 days at most. Every hour, sblurp.chat deletes ended sign-ins and expired links and tokens. The full list is in the privacy policy.

What a community server stores

• For each member: the account id, username, display name, avatar, bio and status. It never gets your email address or your password.
• Messages, reactions, threads and files in every channel and direct message.
• Bans, roles, invites, custom emoji and bots.

When you edit a message, the new text replaces the old text. The old text stays in the event log of the server for up to 7 days. Members of the channel can read it there with the API. When you or a moderator deletes a message, its text, reactions and files are removed. A placeholder that shows the author and the time stays.

When you leave, are kicked or are banned, your messages stay. Your member record stays too, marked as gone. If the owner set a message history limit, the server deletes messages older than that limit every hour. By default it keeps messages forever.

Where the data lives

Your account lives in the United States. sblurp.chat runs on Fly.io in San Jose, California, a state with strong privacy law (the CCPA). We may offer accounts in other regions, such as the EU, if people ask for them.

A community server runs wherever its owner puts it: a hosting service, a VPS or a computer at home. Ask the owner.

Your community's data lives wherever you put your Sblurp server. We do not market Sblurp to the EU in particular, but we must point this out: if you put your server in the EU, all data except accounts lives there, and only there. Accounts stay on sblurp.chat in the United States.

Backups

sblurp.chat copies its database to Cloudflare R2 within 10 seconds of each change. It copies avatars and its keys every hour, encrypted. Avatar backups keep hourly copies for 1 day, daily for 7 days, weekly for 4 weeks and monthly for 12 months.

A community owner chooses their own backups. The Backups page shows the setup that Sblurp suggests.

Get a copy

Download everything that sblurp.chat keeps about you as a JSON file. Open your account and go to Your data. A community server cannot export your messages yet.

Delete your data

Delete your account from your account. Your account, profile, avatar, passkeys and sign-ins are removed from sblurp.chat at once. Copies in backups stay until they expire.

Deleting your account does not delete your messages in communities. Delete messages one at a time, or ask the admins of the community to remove them.

View this page as Markdown · Glossary · API schema.json · openapi.json