Privacy first. Nothing extra.

This policy covers the msk.cx website and installable web app, the iOS and Android apps, the Telegram bot, and optional connected-messaging features.

When an encrypted web or mobile inbox flow is active, clients use local encryption keys and Mask stores encrypted payloads plus the minimum routing metadata needed to deliver them. Messages sent through connected messaging providers are also processed by the selected provider and are not protected by the same end-to-end encryption guarantee. Web push uses a subscription endpoint and subscription keys to send a short notification payload.

Depending on the features you choose, we process inbox links, profile details you publish, privacy settings, timestamps, temporary session and device identifiers, public encryption keys, short-lived chat payloads and routing metadata, message status and previews when enabled, push subscriptions and mute choices, block records, safety reports, privacy requests, limited security and rate-limit signals, and Telegram Stars payment records. The native apps keep session, inbox, device, app-lock, and adult-confirmation data in device storage. Camera access is used only when you choose to scan a QR code.

We use data to provide the inbox and delivery features you request, keep sessions working, apply your choices, handle purchases, prevent fraud and abuse, investigate safety reports, answer privacy requests, and meet legal obligations. Depending on applicable law, processing is based on performing the service you request, your choices or consent where required, our legitimate interests in security and service reliability, and compliance with legal obligations. We do not sell personal data or run advertising trackers.

Chat messages and media are temporary and expire according to the inbox vanishing timer, normally after 24 hours. Where Telegram allows it, Mask also attempts to remove expired bot-relayed copies. Sessions last until they expire, are replaced, or are revoked. Non-active accounts may be deleted after 30 days. Retired msk.cx links are held for a 30-day grace period before reuse. Safety, privacy-request, payment, and security records may be kept longer when needed for review, fraud prevention, disputes, or legal compliance. Connected providers may apply their own retention rules.

Depending on the feature you choose, data may be handled by hosting, database, web-push, app-store, payment, Telegram, WhatsApp, or other selected messaging providers. Those providers may process data in other countries under their own terms. Contact privacy@msk.cx for current production-provider and transfer-safeguard information.

You can edit profile and privacy settings, mute notifications per chat, block or report senders, export account data, reset local app data, and permanently delete an inbox from profile settings or the native app. You can also use the account deletion page. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. We may need to verify your request. EU users may complain to their local data-protection authority.

Mask publishes this notice to describe current product behavior; it is not a claim of independent certification. App-store privacy labels and Data Safety declarations must remain consistent with the released app. Mask is for users aged 16 and older. For privacy questions, contact privacy@msk.cx. For abuse or child-safety concerns, use in-app reporting and see the safety standards. The service operator must publish any additional legal-entity, representative, processor, or transfer details required before offering the service in a jurisdiction that requires them.