NodeXPrivacy policy
Last updated: 3 October 2026
NodeX is a peer-to-peer chat app. It is built so that your account, contacts and messages stay on your own device. This page explains what that means in practice.
The short version
- We have no user database and no accounts on any server.
- Your messages, photos, files and contacts are never sent to or stored on a NodeX server.
- Your email address is used once, to send you a sign-up code, and is not stored.
- We don't use cookies for tracking, analytics or advertising, and we don't sell or share data.
What stays on your device
Your identity key (encrypted with a key that can't leave your browser), your handle, contacts, messages, photos, files, profile photo and settings are stored in your browser's storage on your device. Logging out removes your identity from that device. Your 12-word recovery phrase is shown to you once and is never stored or sent anywhere.
Messages and files
Messages, photos, videos and documents travel directly between your device and the other person's, end-to-end encrypted. When two devices can't connect directly, a NodeX network node relays the encrypted data without being able to read it, and doesn't keep it. Read messages are deleted from both devices 48 hours after they're read.
Your email address
When you sign up, your email address is sent to the NodeX email verifier so it can email you a 6-digit code (through Brevo, below). The verifier keeps no record of it beyond the few minutes the code is valid (to limit repeated requests). Your device keeps only a slow, salted hash of your email, which is also part of your public handle record (below).
Your public handle record
So that people can find you, your device publishes a signed record to the NodeX peer-to-peer network: your handle (for example Rahul#7K3M9X), your public key identifier, and the salted hash of your email. Network nodes keep it in memory for up to 48 hours and anyone who knows your exact handle can look it up. It contains no messages, contacts or your email address itself.
Your profile photo
If you add one, it is sent directly from your device to other people's devices: to everyone who finds or chats with you, or only to your saved contacts, as you choose in your profile.
Email delivery (Brevo)
Sign-up codes are delivered by Brevo, an email delivery service. To send your code, Brevo receives your email address and the email's contents, and keeps delivery records under its own privacy policy. NodeX doesn't use Brevo for marketing and doesn't add you to any mailing list. NodeX never asks for access to your email account.
Hosting providers
The website is hosted on Vercel, and the email verifier and a network node on Render. Like any web host, they may briefly log technical data such as IP addresses to operate and protect their services. If your device uses a STUN server to find a direct connection, that server sees your IP address, but never your messages.
Notifications
If you turn them on, notifications are created by your own browser when a message arrives. No push service or server is involved.
Your choices
- Delete messages for yourself or for everyone, and block people, inside the app.
- Log out to remove your identity and data from a device; clearing your browser data removes it too.
- Stop using NodeX and your public handle record disappears from the network within 48 hours.
Children
NodeX is not directed at children under 13.
Changes and contact
If this policy changes, the new version will be posted on this page with a new date. Questions: divya85870@gmail.com.