End-to-End Encrypted Messaging

Privacy isn't a feature
it's the foundation.

CRYCOM is built so that we genuinely cannot read your messages. Not a policy choice, a technical one. Community servers, voice calls, and ephemeral channels, all encrypted by default.

AES-GCM

Encryption standard

E2EE

All messages

WebRTC

Voice & video

P2P

Call architecture

Privacy you can verify, not just trust

Every privacy guarantee is backed by how the system is built, not by a promise in a policy document.

We can't read your messages

Every message is encrypted on your device before it leaves. We store ciphertext. The server has no way to read your conversations.

Your keys stay on your device

Encryption keys are generated locally and never leave your browser. We have no copy, no backup, no access. Powered by AES-GCM.

No passive monitoring

Moderation is entirely report-based. Administrators only see content that you explicitly submit. Nothing is scanned in the background.

Messages that disappear

Chaos channels auto-delete messages after a configurable timer. Leave no trace when it matters.

Encrypted file sharing

Share files and images in any channel or DM. Uploads are handled without exposing sender metadata.

Zero-knowledge architecture

Our servers are designed to be blind to your content. Even if compelled, we couldn't hand over what we don't have.

How the encryption works

AES-GCM encryption runs entirely in your browser. Your keys are never transmitted.

01

You encrypt, locally

Before a message is sent, your browser encrypts it using a shared channel key. The plaintext never leaves your device.

02

We store ciphertext

Our servers receive an encrypted blob they cannot read. There is no plaintext, no metadata leakage, no surveillance.

03

Only recipients decrypt

The recipient's browser uses the shared key to decrypt. End-to-end means exactly that: no one in between.

Everything else you'd expect

A full-featured platform, without trading your privacy for convenience.

Community servers

Text, voice, announcement, and chaos channels. Role-based permissions and invite codes.

Voice calls

Peer-to-peer WebRTC calls with TURN relay support. Your voice travels directly between devices.

Direct & group messages

One-on-one and group DMs, all end-to-end encrypted. Optional auto-delete for group chats.

Built to keep us honest

Privacy tools only work if the platform can't quietly remove them. CRYCOM's architecture is designed so that even we can't bypass the encryption, making your privacy a technical guarantee, not a discretionary one.

Messages encrypted before they leave your device

Keys generated and stored client-side, never transmitted

No passive content scanning or background monitoring

Voice calls route peer-to-peer via WebRTC

Chaos channels auto-delete on a configurable timer

Report-based moderation: admins only see what you submit

Privacy Policy

CRYCOM encrypts all messages end-to-end. We do not have technical access to message contents.

Data We Collect: Email, display name, profile info (optional). No message content, no metadata tracking.

Data Retention: Profile data persists until account deletion. Encrypted messages are retained per channel settings. Auto-delete timers permanently remove messages.

User Rights: You can download, modify, or delete your profile data anytime. Request data export via settings.

Third Parties: No ads, tracking, or data sales. TURN servers (WebRTC relays) may see IP addresses for connectivity.

We cannot comply with demands for plaintext messages. Encryption keys are stored client-side only.

Terms of Service

User Conduct: No illegal content, harassment, or abuse. Report violations via the report function.

Moderation: Report-based only. Admins see content only when you submit it. No passive scanning.

Server Owners: Responsible for their community guidelines. CRYCOM enforces platform-wide rules only.

Liability: CRYCOM is provided "as-is". We are not liable for encrypted content loss or user disputes.

Termination: We reserve the right to ban accounts for illegal activity or platform abuse.

Encrypted content cannot be recovered by CRYCOM even if your account is deleted.

Safe Harbor Notice

CRYCOM uses encryption that prevents the platform from accessing user content. We are not liable for user-generated content posted on community servers. Report-based moderation means we respond only to explicit reports. Server owners and admins are responsible for their own community policies and compliance.

CRYCOM
PrivacyTermsAES-GCM encryption · E2E by default

© 2026 CRYCOM