Privacy

Your account

A HAIL account is a handle plus a cryptographic key made in your browser. The private half never leaves your device — we only ever see the public half and signatures made with it. Your recovery code is stored only as a one-way hash.

Messages

Each handle has its own private mailbox (a Cloudflare Durable Object). Messages are encrypted in transit (TLS) and encrypted at rest by Cloudflare. They are not end-to-end encrypted in this version, so the service could technically read them; we don't, and no one else gets them. Each mailbox keeps your most recent 5,000 messages.

Calls

Calls connect browser to browser with WebRTC, which encrypts audio and video end to end (DTLS-SRTP). HAIL only relays the call setup. When a direct path is blocked, media passes through Cloudflare's TURN relay still encrypted. Calls are never recorded.

Alerts

If you turn on alerts, we store the push address your browser gives us (Apple, Google, Mozilla or Microsoft push services). Alert contents are encrypted to your device before they leave our servers.

Verify and the API

Apps you give an API key to can send messages and verification codes as your handle. Codes are stored hashed, expire in 10 minutes and burn after 5 wrong tries. Revoke a key and it stops working immediately.

Sharing

• We don't sell, rent or trade data. There are no ads and no trackers.
• Infrastructure runs on Cloudflare, which processes traffic to deliver the service.
• We'll disclose data only if the law compels it.

Deleting

In the app: VERIFY → DELETE HANDLE. That erases the mailbox, messages, keys and alert addresses on the spot and frees the handle.

Abuse

HAIL is free for everyone, not for spam. Rate limits apply, and handles used to harass or defraud are removed.