Privacy policy

Last updated 19 October 2026

ILLEST is a chat platform built so that the people running it cannot read what you say. This page says plainly what the service keeps about you, what it cannot see, and which other companies are involved.

What we cannot see

• Your messages. Messages are end-to-end encrypted on your devices before they are sent. The server stores and relays encrypted bytes it cannot open.
• Your files. Attachments are encrypted on your device with a key made for that one file, and the key travels inside the encrypted message. The server stores the encrypted file and cannot open it.
• Your calls. Voice, video and shared screens are encrypted between the people in the call.
• Your password. Sign-in uses a protocol (OPAQUE) in which your password never reaches the server.
• Your wallet's keys. The wallet is yours alone: its keys stay on your devices and the server never holds them.

What we keep

• Your account: your username, display name, profile picture, banner, bio, status and the other things you choose to put on your profile, and the date you joined.
• Your devices: the name you give each device and its public keys, so the people you talk to can encrypt to it.
• Who is in what: your friends, the conversations and servers you are in, and the roles you have in them. This is needed to deliver messages to the right people.
• Your names and page: the names you claim, and your public page if you publish one. A public page is public: anyone can see it.
• Verification: if you verify your account with Google, we keep a keyed fingerprint of your Google account number so one Google account verifies one ILLEST account. We do not keep your Google address or anything else from Google.
• Payments: Elite and shop purchases are paid in USDC on the Solana blockchain. We keep which account paid, what for, and the transaction. Payments on a blockchain are public by nature.
• Activity you share: if you turn it on, the game, song or program you are using is shown to your accepted friends. It is on by default and can be turned off in Settings, Activity.

Your IP address is used to stop abuse (limits on how often something can be tried). It is not stored with your account, though it can appear for a short time in the server's own logs.

What we do not do

• We do not sell your data, show ads, or use advertising or analytics trackers. The site sets no tracking cookies.
• We do not read your messages, and could not if asked to: we do not have the keys.

Other companies involved

• Cloudflare carries traffic to ILLEST and relays calls when a direct connection is not possible. It sees connection details, not the content of encrypted messages or calls.
• Google, only if you choose to verify your account with it.
• Solana RPC providers (such as Helius and Alchemy) answer the wallet's and the server's questions about the blockchain, like balances and whether a payment arrived. They see the public addresses asked about.
• Jupiter and LI.FI quote and route swaps when you swap tokens in the wallet.
• GitHub hosts the desktop app's downloads and updates.

Keeping and deleting

Encrypted files are kept for the number of days this server sets, then deleted. You can delete your account at any time in Settings, Account; deleting it is permanent. Messages already delivered stay on the devices of the people who received them, as with any messaging app.

Children

ILLEST is not meant for anyone under 13, and we do not knowingly keep accounts of children under 13.

Changes

If this policy changes, the new version is posted here with a new date.

Contact

Questions about your data: message @x on ILLEST, the founder's account.