1. Data Controller
The data controller is Quest Studio Games, the developer of Anonymate.
Contact: support@queststudiogames.com
2. What Anonymate Is
Anonymate is a messaging app built on Nostr, a decentralized protocol. Quest Studio Games does not operate a central Nostr relay or content server: messages and public content travel through independent third-party servers known as relays. This technical fact is not a claim that Anonymate has a particular legal classification.
Anonymate does not manage centralized accounts and does not require an email address, phone number or identity document.
3. Data Processed and Where It Resides
- Cryptographic keys: your Nostr identity is generated and stored locally. We never receive your keys. If you lose them, no one can recover your account.
- App data: settings, contacts you verified by QR code, message history, content cache and local backups remain on your device.
- Security data: trusted contacts, your code word, your emergency PIN and the log of intruder photos are stored only on your device.
- Biometric data: Face ID or fingerprint authentication is handled only by your operating system to unlock the App. Anonymate cannot access this biometric data.
Direct and group messages use end-to-end encryption through the NIP-59 “gift wrap” standard. Only the sender and the recipients can read their contents. Relays receive only encrypted envelopes.
Attachments in private chats are encrypted on your device before upload and stored in encrypted form on a third-party media server (currently nostr.download), using a single-use key that is not linked to your account. The server cannot read them.
Community posts, comments, reactions and profile information, including your chosen name, avatar and bio, are signed with your key and sent to public relays. This information is publicly visible and may be copied or retained by servers we do not control.
Photos and audio attached to public posts are uploaded to third-party media hosting services, currently nostr.build, and are subject to those services' terms.
Place notes are published to relays with their text and an approximate geohash area (not your exact position), under a separate key created for that place and not linked to your account. The event and geohash are public and can be queried remotely by anyone. Third parties may copy, index or retain them even after an expiry or deletion request.
Relays and media hosts may receive your IP address and technical connection data. End-to-end encryption protects private-message content, but does not hide all transport metadata from the services carrying traffic.
- SOS and location sharing: when you trigger an SOS or share your location, your position, battery level and, if enabled, a short audio clip are sent only to the trusted contacts you chose, as encrypted messages (or over Bluetooth when there is no internet). Location messages are plain text without map links, so no map provider receives your coordinates.
- Intruder photo: after wrong PIN attempts the front camera can take a photo. It stays on your device and is sent to your trusted contacts, together with your location, only if you enable that option.
- Tracker detector and Wi-Fi alert: nearby Bluetooth devices and the type of Wi-Fi network are analysed on your device only. Nothing is uploaded.
- Suspicious link check: links are checked on your device before they open.
- Anonymous reports: a report is sent as an encrypted message from a single-use key, so the recipient does not learn your name, photo or account key.
- Tor: if you enable it, traffic is routed through the separate Orbot app, which is subject to its own terms.
When you play a track in a listening room, it is loaded from YouTube through the privacy-enhanced youtube-nocookie.com player. YouTube may receive your IP address and technical data under Google's privacy policy. Only the playback state (track, pause, position) is shared with the room through relays.
- Camera and microphone: used to take photos, make stickers, record voice messages, make calls and, if you enable them, the intruder photo and SOS audio. Anonymate does not record in the background unless you start an SOS.
- Location and nearby Bluetooth/Wi-Fi: used only for nearby rooms, place notes, messages over Bluetooth, SOS and the tracker detector. Your location is never sent to Quest Studio Games.
- Notifications: used to alert you to messages and interactions.
Anonymate Premium and sponsored posts are bought through Google Play or the Apple App Store. Payment is processed entirely by Google or Apple; Quest Studio Games never receives your card details and stores no billing data. To restore a purchase, the App keeps an encrypted note of it in a private message to your own key.
4. What We Do Not Do
- We do not use advertising tracking, analytics SDKs or profiling.
- We do not sell or share data with advertisers.
- We do not collect email addresses, phone numbers, address-book contacts or advertising identifiers.
5. Legal Basis and Purposes
Processing is carried out to provide the service requested by the user under Article 6(1)(b) GDPR, including sending messages, publishing content and using App features.
Reports of illegal content may be processed to comply with legal obligations and for the legitimate interest of platform safety under Articles 6(1)(c) and 6(1)(f) GDPR.
6. Retention and Technical Limits of Deletion
You can delete your posts from the App. This sends a deletion request to the network. Because public content is distributed across independent relays, we cannot guarantee that every copy will be removed from every third-party server.
Publishing to a decentralized network is inherently difficult to reverse. Keep this in mind before publishing. Local data can be removed by uninstalling the App or using the reset options in Settings.
For information deliberately sent to support, proposed maximum retention periods are 12 months after closure for ordinary support and 24 months for illegal-content notices. A law-enforcement request log may be kept for up to 5 years. These targets remain subject to legal preservation duties and confirmation of provider deletion capabilities; data should be removed sooner when no longer necessary.
7. Your Rights under the GDPR
You have the right to access, rectify, erase, restrict or object to processing, and to data portability, subject to the technical limits described above.
Quest Studio Games does not maintain a central messaging database. Most rights relating to local or public-network data are exercised in the App; information deliberately sent to support is handled separately and may be retained when needed for the request or a legal obligation.
For any request, contact support@queststudiogames.com. You also have the right to lodge a complaint with the Italian Data Protection Authority at www.garanteprivacy.it.
8. Minors
Anonymate is intended for users who are at least 18 years old. The App performs a neutral age check at registration; the date of birth entered is never stored or transmitted, only the outcome of the check remains on the device. Use by anyone under 18 is not permitted.
9. Reports and Illegal Content
The App provides tools to report illegal content, hide posts and block users. A NIP-56 report is a public network signal; it is not a direct notice to Quest Studio Games and does not guarantee review or deletion. Quest Studio Games cannot delete or remove copies held by independent relays. Send a direct notice to support@queststudiogames.com. For non-consensual sharing of intimate images, the App also directs victims to StopNCII.org.
Information deliberately included in a support email or notice reaches Quest Studio Games and may be processed solely to assess and answer it. Do not send unnecessary sensitive material.
Before an image is published or sent, the App analyses it on your device: a nudity classifier (a neural network running locally) and a perceptual fingerprint compared against a reference list of known harmful media bundled with the App. The caption is also checked for wording that combines minors with sexual or coercive context. The media and the results of these checks are never uploaded to Quest Studio Games and are never sent to a third-party scanning service; any match is recorded only in a local log on your device. These checks reduce risk but are not a guarantee.
10. International Transfers
Nostr relays and media hosting services operate globally. Content you publish, and the encrypted envelopes of your private messages, may therefore reside on servers outside the European Economic Area. This is inherent to the decentralized nature of the protocol.
11. Security
Security measures include on-device key generation and storage, end-to-end encrypted messages and attachments, optional biometric unlocking, an optional emergency PIN and optional screenshot protection in chats. Quest Studio Games does not operate a central messaging database; information reaches support only when you deliberately submit it.
12. Changes to This Policy
Changes to this Privacy Policy will be published at this address with an updated date. Material changes will also be announced in the App.