General Guidelines
Understanding the principles of walubee and encrypted communication
1. Anonymity & Privacy
Walubee is designed to be privacy-preserving. We don't use tracking cookies, log IP addresses under normal operation, or monitor your behavior. However, it is vital to understand that no system can guarantee 100% anonymity.
2. Keys & Security
There are no central accounts. Your identity is managed locally on your device via cryptographic keys.
- Encryption & Signing: Every message you send is end-to-end encrypted and cryptographically signed. This ensures that only the recipient can read it and that the sender's identity (the Public Key) is verified.
- Usernames: These are non-unique labels for better readability. Usernames are derived from the public key and can also be assigned multiple times.
Warning: If you lose your keys or clear your browser storage without a backup, your identity is lost forever.
3. Chatting Responsibly
"In an anonymous world, you don't know who is behind the screen."
Because users cannot be traced back to real-world identities, you must be extremely cautious. Practice digital self-defense:
- Sensitive Data: Never share your real name, address, phone number, or bank details. Also don't share any social media accounts.
- Media Sharing: Avoid sending sensitive images. Remember that you don't know who is sitting behind the screen at the end of the day.
- Verification: Don't just trust people. Verify information and always question other users critically.
4. Message Delivery
The relay server delivers messages in real-time. If a recipient is offline, encrypted messages are buffered temporarily (up to 24 hours) and delivered automatically once they come back online.
If push notifications are enabled, the recipient receives a notification via their browser's push service. This notification only indicates that a new message is waiting — it never contains message content, which remains end-to-end encrypted.
Note: If the recipient does not come online within 24 hours, buffered messages are permanently deleted. Push subscriptions are automatically removed after 30 days of inactivity.
5. Local Message Filtering
To protect you from spam and potentially harmful content, walubee employs smart message filters. This is essential for maintaining a safe environment in an open network.
- Privacy First: All filtering happens locally on your device. Your messages are never sent to external servers for analysis.
- Security: These filters help identify and hide known malicious patterns or automated spam, ensuring your chat experience remains clean and focused.
6. Reporting Users
walubee includes a reporting feature that allows users to flag others for serious violations of our Community Guidelines or applicable law (e.g., illegal content, harassment, threats).
- Filing a Report: When you report a user, the report is sent to our server for review. The reported user is not notified of the report.
- Encrypted IP Token: Upon a report, the server generates an encrypted string (token) that contains the reported user's IP address. We do not store that token on our servers.
- Legal Disclosure: The encrypted token may be decrypted to reveal the IP address and disclosed to law enforcement authorities in cases of serious violations of the law.
Abuse of the reporting feature (e.g., filing false or malicious reports) undermines trust and leads to a ban.