Side Channel takes data privacy very seriously. We strive to store only the absolutely necessary information for the shortest possible time. Furthermore, we take all usual technical measures to prevent unauthorized access to your data on our servers.
Side Channel as the operator of the Side Channel servers has no way to decrypt messages of Side Channel users because it does not have knowledge of their private keys.
The encrypted messages and media (images, videos etc.) are deleted on the servers as soon as they have been delivered successfully.
Header information of messages (sender, recipient etc.) is protected by an additional encryption layer for transmission to the server, and from the server to the recipient, to prevent eavesdropping by third parties (e.g. in open wireless LANs).
Email addresses and phone numbers from the user's address book (if the user starts synchronisation) are only transmitted to the server protected using SSL. The servers only keep this information in volatile memory for a short time to determine the list of matching IDs, and then delete the information immediately. At no point is this information or the results of the synchronization written to disk.
It is left at the discretion of the user whether or not they want to link their Side Channel ID with an email address or phone number. Side Channel can be used without this link; in that case, the user cannot be found automatically by other users via address book synchronization.
Email addresses and phone numbers that have been linked will only be stored for the purpose of synchronization and not given to third parties. They will also not be used for advertising purposes. Users can delete their links at any time.
Android: If the user explicitly chooses to submit a crash report about the Android app, information about the crash (state of the app at the time of the crash, last log messages) will be sent to Google and stored there for analysis by Side Channel.
In general, the regulations of the Federal Act concerning the Protection of Personal Data (DSG 2000) apply.