Privacy Policy
Last updated: July 16, 2026
Plumer is a messaging app developed by Sergey Tretyakov («we», «us»). This document describes what personal data we collect, why, and how we store it when you use the web version (plumer.ru) and the mobile apps. By using Plumer, you agree to this Policy.
1. What data we collect
- Account: your email address and display name — used for sign-in and identification in chats. Your password is stored only as a cryptographic hash (Argon2id); we never store or see it in plain text.
- Profile: your avatar (an uploaded file or a link), a short «about» description (bio), your chosen theme, and privacy settings (for example, hiding your last-seen time).
- Message content and reactions: the text, photos, video, audio and files you send, as well as emoji reactions and service metadata (send and edit times, replies, forwards). Messages are not protected by end-to-end encryption — they are stored on our servers in a form accessible to the Service in order to provide delivery across devices, history and search. Data is protected with TLS encryption in transit.
- Attachments: images, files, audio and video are saved in object storage (S3-compatible). Links are issued as presigned URLs with a limited validity period.
- Presence data: your last-seen time and «online» status. The «online» status is kept in memory and is not written to disk. Hiding last-seen is available in settings.
- Push tokens: to deliver notifications we store web push tokens (the browser endpoint and keys) and mobile push service tokens (FCM for Android, APNs for iOS, Expo). A token is bound to a device.
- Call log: for audio, video and screen-sharing calls we store only metadata — type, duration, participants, status and time. The content of calls (audio and video) is not recorded and is transmitted between participants in real time through the LiveKit media server.
- Game integration data: if you arrived at Plumer from a partner game, we may store a snapshot of your in-game name and avatar, your game identifier, achievements, inventory items and in-game balances.
- Technical data: when your device contacts the server, infrastructure logs (nginx) record the IP address, the browser or mobile client version (User-Agent) and the request time — for security and abuse prevention.
2. Why we use this data
- Delivering your messages to recipients and syncing history.
- Identifying you at sign-in and protecting your account.
- Sending push notifications (if you have allowed them).
- Supporting voice and video calls through LiveKit.
- Security: blocking spam and protecting accounts from takeover.
- Showing «online» / «last seen recently» status — can be turned off in your profile settings.
We do not sell your data and do not use the content of your conversations for advertising.
3. Who we share data with
Sharing happens only with technical service providers, without which the Service would not work:
- LiveKit — establishing the connection and transmitting media streams during calls; media is not stored.
- Firebase Cloud Messaging, Apple Push Notification service and Expo — delivering push notifications. The notification payload and the device token are transmitted.
- S3-compatible storage and the hosting providers on which the Service runs.
We may also disclose data upon a lawful request from competent authorities.
4. How long we keep data
- Account data, messages and attachments are stored for as long as your account exists, or until you delete them yourself.
- Technical logs are kept for a limited time and are rotated.
- Push tokens are removed automatically on the first failed delivery (evidence that the app was uninstalled).
- After you delete your account, we anonymize your data (see section 5).
5. Your rights and account deletion
You can delete your account at any time directly in the app (Settings → Delete account) or on the plumer.ru/account/delete page. When you delete it, we:
- anonymize your profile: your email is replaced with a technical one, your name with «Deleted account», and your avatar and description are removed;
- delete push subscriptions and revoke sessions and access tokens;
- remove you from groups and channels; channel ownership is transferred to another member, and if no members remain, the channel is deleted;
- keep previously sent messages in anonymized form (with no link to your identity), so as not to break the conversation context for the people you talked to — the same as Telegram does.
Additionally, you can:
- request an export or correction of your data — write to admin@plumer.ru;
- turn off push notifications — Settings → Notifications (by category);
- hide your «online» status — Settings → Privacy;
- block a user — on their profile page.
6. Security
We use encryption in transit (TLS), password hashing and access control. No method of transmission or storage is 100% secure, but we take reasonable technical and organizational measures to protect your data.
7. Children
Plumer is not intended for users under 13 (or another age set by local law). If we learn that data was collected by a minor's account, we will delete it.
8. Changes to this policy
We may update this document. We will notify you of material changes in the Service or by email. The date of the last update is shown at the top of the page.
9. Contact
Privacy questions and requests: admin@plumer.ru