Privacy policy.

Who we are

Moin is run by Asynkron, a Danish sole proprietorship (CVR 42349399). Asynkron is responsible for the personal data described here. You can reach us at contact@moin.chat.

Apps

Moin’s desktop and mobile apps do not collect analytics or usage data, and they send us nothing unless you choose Send feedback and press Send.

On Windows and Linux, the first time Moin runs it downloads the OpenH264 video codec from Cisco’s download server, for screen sharing on computers without a hardware codec. Cisco sees your IP address and the file requested, nothing else, and we see nothing. You can turn this off in the app’s settings.

A report contains what you write, the contact details you add if any, your app version and platform, your operating system’s version and processor count, and the app’s logs. The logs record what the app did and when. They never contain passwords, nicknames, room or community names, or messages. They can contain server addresses, and they contain identifiers for your device, the other devices in your call, the server, the room and each screen share, so reports from people in the same call can be matched. Identifiers for devices and servers are one-way hashes.

We use reports only to find and fix problems in Moin, and our operators can read them. They are stored on our servers at Hetzner in Germany and deleted 180 days after we receive them. To have one deleted sooner, write to contact@moin.chat with the reference the app showed you. Our backups can keep a copy for up to 30 days after that.

Website

This website uses our self-hosted Umami analytics, including session recording, to understand visits and interactions. We use this data only to improve the website.

Newsletter

If you subscribe to the newsletter, we store your email address with our email provider, Resend, and use it only to send you news about Moin, such as new releases and features. Every email includes an unsubscribe link. To have your address deleted, write to contact@moin.chat.

Hosting: your account

If you buy a hosted community, your account is your email address. We use it to send you sign-in links and emails about your communities, such as when one is ready, suspended or about to be deleted. We don’t send marketing to it. If you ask to sign in with an address that has no account, we email that address to say so, and create no account for it.

Signing in sets two cookies: one keeps you signed in for 30 days, the other protects the sign-in form for an hour. The service needs both to work, and it sets no others. There are no analytics on the hosting pages.

We keep a record of what happens in your account, such as sign-ins, purchases and changes to your communities, with the email address of whoever did it. We use it to keep the service secure and to answer questions about your account.

Hosting: payments

Stripe handles payments. You enter your card and billing details on Stripe’s checkout page, and we never see your card number. Stripe tells us your customer and subscription IDs and what happens to your subscription, and its messages to us about your checkout include your email address and billing details. How Stripe uses your data is covered by Stripe’s privacy policy.

Hosting: your community

We run your community’s server for you. It stores what any Moin server stores: the community’s name and rooms, the devices that have joined, when and how each joined, their roles, and the community’s invitations. A device is identified by a key the app creates, so no one needs a name or an email address to join. Nicknames and room messages are held only in memory while people are connected.

Your community’s address, such as name.moin.chat, is a public DNS record. Its name and what’s inside it are not published.

While your community runs, its server reports to us how many devices are connected, and how many rooms they are in. We use this to run the service. When our operators run a command on a community to help with a problem, they can see the nicknames and rooms of the people connected to it, and we keep what the command showed for 30 days.

If you set a community password, we keep it encrypted so we can apply it to your server. It is deleted with the community.

You decide who joins your community. For the people in it, we store their data on your behalf and use it only to run your community.

When two devices can’t connect directly, their connection can pass through public relay servers run by a third party. The relays see the devices’ IP addresses but not what they send, because connections are encrypted end to end.

Hosting: companies we use

Hetzner runs our servers and stores our backups, in Germany. Resend sends our emails. Stripe handles payments. Porkbun hosts the DNS records for community addresses.

Stripe and Resend are based in the United States. Both take part in the EU-U.S. Data Privacy Framework and use the EU’s standard contractual clauses for data from the EU.

Hosting: how long we keep data

When a subscription ends, its community is suspended. After 30 days the community is taken off its server and kept only as a backup, and 90 days later that backup is deleted. If you delete a community yourself, its server and backups are deleted straight away. We keep its address reserved so no one else can take it over.

Our off-site backups keep copies for up to 30 days, so deleted data can remain in them for that long. If we have to restore a backup, we delete again any account or community that was deleted after it was taken.

Server logs are kept for 30 days.

Your account and the record of what happened in it are kept while you have a community with us, and deleted one year after your last one is deleted. An account that never had a community is deleted one year after it last signed in, or one year after it was made if it never signed in. When we delete an account, we keep a note that we did and when, without its email address, and a record of what our operators did to its communities, for three years.

Stripe’s messages about your payments are deleted after one year. We keep the sales records Danish bookkeeping law requires for five years after the end of the financial year, and they hold the name, address and VAT number on invoices. Stripe keeps its own records of the payments.

Child safety standards

Moin prohibits child sexual abuse and exploitation (CSAE), including child sexual abuse material (CSAM). Report child safety concerns to contact@moin.chat.

Selling data

We do not sell personal information or analytics data. Questions can be sent to contact@moin.chat.

Your rights

You can ask us for a copy of the personal data we hold about you, to correct it, or to delete it, by writing to contact@moin.chat.

You can delete your hosting account yourself from your account, which cancels its subscriptions and deletes its communities. Asking us to delete it does the same.

If you’re in a community we host, its owner can remove your device, which deletes it from the community.

If you think we handle your data wrongly, you can complain to Datatilsynet, the Danish data protection authority, or to the one where you live.