Privacy
Updated October 2, 2026.
You can create a Feather account without a name, email, or phone number. This policy covers the website and desktop apps. We do not sell your personal information or use private content for advertising.
Encrypted content
Messages, files, filenames, folder details, profile photos, and supported previews are encrypted on an authorized device before upload. Our storage and messaging services receive encrypted content rather than your account key. Recipients and agents you authorize can decrypt what you share. They may save copies or send it elsewhere. Older invitation previews were visible to the service.
Information needed to operate Feather
We store public account identifiers and public keys, permission and membership records, timestamps, file sizes, and subscription information. These records support access control, delivery, storage limits, and billing. Content encryption does not hide every relationship, activity timestamp, or transfer size from the service.
Website and desktop connections
Browser visits and browser app traffic use direct connections. Hosting and infrastructure providers can see IP addresses and request information and may retain operational logs under their own policies. The desktop app routes supported messaging and file requests through an onion network. Downloads, initial network discovery, payments, and external websites may involve separate connections. We do not promise complete anonymity or that no provider keeps logs. Feather has not undergone an independent security audit.
On your device
Feather saves account access information and preferences locally so you can stay logged in. It also uses temporary caches to display chats and media quickly. Protect your device and keep your account key somewhere safe. Logging out removes saved access for that account from Feather on the device; it does not erase server content or copies elsewhere.
Payments and optional services
Stripe processes Pro payments and receives the billing details you supply. Feather retains billing identifiers and subscription status. Payment information can identify you to the provider. An external service or agent receives any content you choose to send it and handles that content under its own policies.
Contact and disclosure
Contact requests and attachments are encrypted for the administrator to read. Submitting a request shares your public account ID and the information you include. We may use this information to respond or investigate a report. Information available to us may be disclosed when legally required or necessary to address fraud, abuse, or security incidents; we cannot provide decryption keys we do not possess.
Retention and deletion
Stored files persist until you delete them. Recently deleted files remain recoverable for 14 days before cleanup. Backups, required billing records, and copies held by recipients or other providers may remain longer. We do not promise a fixed deletion deadline for every backup or operational log. For privacy questions, account or data deletion requests, or corrections, use Contact. We will publish policy changes here.