Privacy Policy

Last Updated: April 15, 2026

Your privacy matters to us. This page explains in plain language what data MiroTalk SFU ("we", "us", or "our") handles when you use our service, and how we keep it safe. If anything is unclear, feel free to reach out — our contact info is at the bottom.

1. How It Works Under the Hood

MiroTalk SFU is built on mediasoup, a Selective Forwarding Unit. In simple terms, the server acts as a smart relay: it receives your audio and video and forwards it to the other people in the room. It does not record, inspect, or process the content of your calls. Everything is encrypted end-to-hop with SRTP and DTLS, so your media stays private in transit.

2. What We Don't Collect

Everything is ephemeral. Display names, chat messages, and session data only exist while the room is active — once it ends, they're gone. Nothing is stored on our servers afterward.

Anonymized stats only: We pick up anonymized usage statistics (page views, browser type, OS) through our privacy-friendly analytics. No personally identifiable information is collected or stored.

Things we never touch: We don't record your calls, we don't ask for payment info or government IDs, and we don't collect sensitive personal data. Your conversations are yours.

3. Recordings Stay on Your Device

When you hit "Record", the file is created right inside your browser (as a Blob) and downloaded straight to your device. It is never uploaded to our servers.

Server-side recording is disabled by default. If the host enables it, the recordings are persistently stored on the server or cloud storage (if configured). It is the host's responsibility to manage, secure, and delete those recordings. Please remember: if you record other people, make sure you have their consent — it's the right thing to do (and usually the law).

4. Cookies & Analytics

We use Umami, a privacy-friendly analytics tool that doesn't use cookies and doesn't collect personally identifiable information. It's fully compliant with GDPR, CCPA, and PECR.

The app may store small bits of data in your browser (like your display name or room preferences) to make things easier for you. This is purely functional — no tracking involved.

5. How Long We Keep Data

Server logs are kept only as long as needed to keep things running and diagnose issues, then automatically deleted. Chat messages and session data disappear when the room ends — we don't hold onto them unless the host has explicitly set up persistence.

6. How We Protect Your Data

We take security seriously: SRTP/DTLS encryption for all media, TLS/HTTPS for web traffic, and hardened server infrastructure. That said, no system is bulletproof — if you ever spot a vulnerability, please let us know so we can fix it fast.

7. Third-Party Services

MiroTalk may connect to external services like RTMP streaming endpoints, CDNs, or other APIs. Each of those has its own privacy policy, and we encourage you to check them out. We can't take responsibility for how third parties handle data on their end.

8. Self-Hosted Instances

MiroTalk SFU is open-source — anyone can host their own instance. If you're using someone else's self-hosted version, they are responsible for privacy, not us. This policy only covers instances we operate directly.

9. Policy Updates

We may tweak this policy from time to time. When we do, we'll update the "Last Updated" date at the top. If you keep using the service after a change, that counts as acceptance. We recommend checking back occasionally.