Privacy
What leaves your device, and to whom. Nothing here is hidden from you; this is the whole list. There is no account server, no analytics and no third-party script.
Pods
A chat room is a folder on a Solid pod. The pod that hosts a room you open sees your IP address, that you read the room, and everything you post there. Rooms are stored in the open: whoever the folder's permissions allow can read them, and rooms created here are readable by anyone with the link. Posting sends a request signed by your key (NIP-98), so the pod learns your public key. Reading is anonymous unless the pod refuses anonymous reads, in which case the request is repeated signed.
Relays
The shared app relays and the inbox relays people publish for themselves see your IP address and the gift-wrapped direct messages you send and receive. Direct message content is encrypted end to end with NIP-44; a relay sees only a wrapped event with a random throwaway sender key, not who is writing to whom.
nostr.social
The did:nostr directory is asked for the profiles of people you chat with, for people search, and for follow lists on the New message screen. It sees your IP and which public keys you look up. Everything it returns is a signed Nostr event that is verified on your device.
Profile documents
People who post in a room from another Solid app are identified by their WebID. Their profile document is fetched from their pod to show a name and picture, which tells that pod your IP.
Media server
Files you choose to upload go to a Blossom server (blossom.nostr.build by default, changeable in Settings) with an authorisation event signed by your key. The server learns your public key, your IP and the file. The file's address is posted into the chat, so it is as public as the chat.
Avatars and media hosts
Profile pictures load automatically from wherever a profile points, without a referrer. Images, video and audio inside room messages and from your contacts load automatically; in direct messages from anyone else you tap "Show media" first, because loading a file tells its host your IP.
NIP-05 addresses
An address like name@domain is verified by fetching that domain's well-known file. This happens automatically for yourself, your contacts and people you have messaged. For anyone else the address is shown unverified with a "verify" tap.
Your key
Your private key stays in this browser's local storage, or in your signer extension or remote signer. We never see it. Decrypted messages and room history are cached in this browser only. Signing out removes this account's cached messages and settings from the device.
What we do not have
No server of ours sees your messages, contacts or usage. The site is static files; the hosting provider (GitHub Pages) sees the ordinary web requests for those files.
Source: github.com/solid-chat/v2. The README's Privacy section is kept in step with this page.