YapperPrivacy Policy
Last updated 16 October 2026
What Yapper collects, why, who helps us run it, and the rights you have. No ads, no selling your data, no tracking cookies.
Who is responsible
The data controller is Antic (David), an independent developer based in the European Union. Contact: hello@yapper.website.
What we collect
- Account: your email address, username and password (stored only as a secure hash).
- Profile: profile picture, banner, bio and how you cropped them.
- What you post: messages, direct and group messages, images, reactions, custom emojis, servers, channels, roles, invites, and when you last read each chat.
- Connections: friends, friend requests and people you’ve blocked.
- Technical: IP address and basic browser details in our providers’ server logs, used for security and to stop abuse (for example limiting sign-ups per address).
- Voice and screen sharing: streamed live through our provider while you’re in a call. We don’t record it.
Automated safety checks: before an image uploads, your own browser checks it for sexual content. After it uploads, our servers check images, GIFs and videos again for sexual or abusive content and for pictures our moderators already removed. Messages and files you send, including in DMs and group chats, are also checked automatically on our servers for spam, scam and phishing links, malware and ban evasion. These checks are automated; a person only looks at private content when it was reported, flagged by a check, or when safety, security or the law requires it. See section 5.5 of the Terms.
Why we use it (and our legal basis)
- To run Yapper for you - accounts, chats, calls, emails like sign-up confirmation and password resets. Basis: our contract with you (GDPR Art. 6(1)(b)).
- To keep Yapper safe - preventing spam and abuse, the automated safety checks above, moderating, enforcing our rules, preventing payment fraud, fixing bugs. Basis: our legitimate interests (Art. 6(1)(f)).
- To follow the law - answering valid legal requests and handling reports of illegal content. Basis: legal obligation (Art. 6(1)(c)).
- Desktop notifications - only if you turn them on in your browser. Basis: consent, which you can withdraw any time.
Who can see your stuff
Your username, profile picture, banner and bio are visible to other Yapper users. Messages are visible to the people in that chat or channel. Server owners and moderators can remove messages in their servers.
Who helps us run Yapper
These providers process data for us, only to provide their service:
- Supabase - database, logins and file storage. Servers in Frankfurt, Germany (EU).
- Vercel - hosts the website (global network).
- LiveKit - relays voice calls and screen shares (United States).
- Resend - sends our emails (United States company).
Where data goes outside the EU/EEA, it’s protected by the European Commission’s Standard Contractual Clauses and/or the EU–US Data Privacy Framework. We never sell your data or share it with advertisers.
How long we keep it
- Your content stays until you delete it or delete your account.
- Deleting your account (User Settings → My Account) immediately removes your login, profile, messages, reactions, friends, uploaded pictures and any servers you own.
- Backups are kept for up to 7 days and server logs for a short time (up to about 30 days), then they’re gone.
- We may keep specific information longer if the law requires it or to deal with a serious abuse report. When content or an account is reported, removed or under investigation, we may keep the content, IP addresses, session logs and account and payment records after deletion for as long as needed for the report, a legal request or a preservation order. For child sexual abuse material this is at least one year, and we report it to NCMEC and/or the authorities.
Your rights
You can ask to access, correct, delete or get a copy of your data, to restrict or object to how we use it, and to withdraw consent. Email hello@yapper.website from your account’s email address and we’ll respond within one month. You can also complain to your local data protection authority.
Cookies and storage
We don’t use advertising or tracking cookies. Your browser stores only what Yapper needs to work: your login session, your theme and whether you’ve dismissed the notifications prompt. Because this is strictly necessary, there is no cookie banner.
Children
Yapper is not for children under 13. If you believe a child under 13 has an account, email us and we’ll delete it.
Security
Connections are encrypted (HTTPS), passwords are hashed, and access rules in our database stop people reading chats they’re not part of. No system is perfect. If we have a breach that puts you at risk, we’ll tell you and the authorities as the law requires.
Changes
If we change this policy in a way that matters, we’ll tell you in the app. See also our Terms of Service.