What Information We Process
To operate group chats normally, the system processes necessary operational data:
Identifiers generated during random account creation and daily resetting public nicknames.
Connection status, membership lists, and real-time message text transmitted during room use.
Evidence messages and handling logs attached during reports.
If using paid features, order identifiers, payment status, and membership validity.
Data Cleanup Upon Room Closure
Rooms exist for at most 24 hours from creation, and may close earlier if disbanded by host, inactivity timeout, or moderation.
Upon closure, room records, membership lists, message text, and report evidence are purged from active application data.
Deletion upon room closure cleans up application database records and caches, which is distinct from physical disk, WAL, or historical backup overwrites. Offline devices clear page content once back online or notified.
Data Retained Independently of Rooms
Account, device credentials, membership, and payment info are retained independently from rooms; room closure does not mean these records are deleted.
Account credentials remain on the current device to continue using the random identity or bound memberships.
Server access logs and payment transaction records may be retained as required by relevant regulations.
Technical Boundaries and Personal Care
ODO does not provide end-to-end encryption and cannot prevent participants from taking screenshots, copying, or saving content.
Do not send passwords, IDs, bank cards, seed phrases, or identifiable addresses in chats. Any participant can take screenshots or record their screen.