What “zero metadata” means (and does not)
Buzzio uses “zero metadata” in a scoped sense. This reference page prevents over-claiming.
Scoped meaning
On sealed surfaces — especially private 1-to-1 after nothing remains undelivered, and Whisper private chat after expiry — Buzzio aims not to keep a durable server archive of:
- who privately talked to whom, and
- what they said
for that conversation.
Preferred sealed 1:1 delivery further avoids plaintext sender on the outer envelope and FCM wake.
What still exists
| Data | Why |
|---|---|
| Account / Buzzio ID / profile | Product identity |
| FCM tokens | Wake devices |
| Undelivered sealed queues | Delivery before recipient online |
| “R got sealed wake at T” | Push/infrastructure visibility |
| CF sender knowledge at cert verify | Abuse / rate limits |
| Blocks / reports | Safety |
| Shared-mode history & DEKs | Communities, broadcast, OHG, Stories ops, Whisper Questions |
| Analytics events | Operate the product (not sell ads) |
What we never mean
- Tor-grade network anonymity
- Absolute operator blindness on Firebase
- “Stores nothing at all”
- Shared rooms are sealed
Related: Privacy guarantees · Sealed vs shared · Sealed sender