1. Data Controller
The data controller is Quest Studio Games, the developer of Anonymate.
Contact: support@queststudiogames.com
2. What Anonymate Is
Anonymate is an anonymous social network built on Nostr, a decentralized protocol. Public content is not stored on Anonymate servers. It is distributed across a network of independent third-party servers known as relays.
Anonymate does not manage centralized accounts and does not require an email address, phone number or identity document.
3. Data Processed and Where It Resides
- Cryptographic keys: your Nostr identity is generated and stored locally. We never receive your keys. If you lose them, no one can recover your account.
- App data: settings, sessions, content cache and local backups remain on your device.
- Atlas conversations: the Atlas AI model runs entirely on your device. Text, images and audio from Atlas chats are not sent to Anonymate servers or AI providers.
- Biometric data: Face ID or fingerprint authentication is handled only by your operating system to unlock the App. Anonymate cannot access this biometric data.
Posts, comments, reactions and profile information, including your chosen username, avatar and bio, are signed with your key and sent to public relays. This information is publicly visible and may be copied or retained by servers we do not control.
Photos, videos and audio attached to posts are uploaded to third-party media hosting services, currently nostr.build, and are subject to those services' terms.
Direct messages use end-to-end encryption through the NIP-59 “gift wrap” standard. Only the sender and recipient can read their contents. Relays receive only encrypted envelopes.
- Camera and microphone: used to take photos, record video or voice, make calls and use Atlas Voice. Anonymate does not record in the background.
- Location and nearby Bluetooth/Wi-Fi: used only for nearby discovery and nearby-device chat. Your location is not sent to Anonymate servers or published.
- Notifications: used to alert you to messages and interactions.
If you enable web search in an Atlas conversation, the text of your search query is sent to DuckDuckGo to retrieve results. No other data is shared.
4. What We Do Not Do
- We do not use advertising tracking, analytics SDKs or profiling.
- We do not sell or share data with advertisers.
- We do not collect email addresses, phone numbers, address-book contacts or advertising identifiers.
5. Legal Basis and Purposes
Processing is carried out to provide the service requested by the user under Article 6(1)(b) GDPR, including publishing content, sending messages and using App features.
Reports of illegal content may be processed to comply with legal obligations and for the legitimate interest of platform safety under Articles 6(1)(c) and 6(1)(f) GDPR.
6. Retention and Technical Limits of Deletion
You can delete your posts from the App. This sends a deletion request to the network. Because public content is distributed across independent relays, we cannot guarantee that every copy will be removed from every third-party server.
Publishing to a decentralized network is inherently difficult to reverse. Keep this in mind before publishing. Local data can be removed by uninstalling the App or using the reset options in Settings.
7. Your Rights under the GDPR
You have the right to access, rectify, erase, restrict or object to processing, and to data portability, subject to the technical limits described above.
Because we do not store personal data on our servers, most rights are exercised directly in the App by editing your profile, deleting content or resetting local data.
For any request, contact support@queststudiogames.com. You also have the right to lodge a complaint with the Italian Data Protection Authority at www.garanteprivacy.it.
8. Children
Anonymate is intended for users who are at least 18 years old. Use by anyone under 18 is not permitted.
9. Reports and Illegal Content
The App provides tools to report illegal content, hide posts and block users. For non-consensual sharing of intimate images, the App directs victims to StopNCII.org.
A report may require processing the reported content solely to assess it.
10. International Transfers
Nostr relays and media hosting services operate globally. Public content you choose to publish may therefore reside on servers outside the European Economic Area. This is inherent to the public, decentralized nature of the protocol and applies only to content you voluntarily make public.
11. Security
Security measures include on-device key generation and storage, end-to-end encrypted direct messages, optional biometric unlocking and optional screenshot protection in chats. Personal data is not transmitted to Anonymate servers.
12. Changes to This Policy
Changes to this Privacy Policy will be published at this address with an updated date. Material changes will also be announced in the App.