To be precise: message content in Gather is end-to-end encrypted and the servers never hold it in plaintext. Below is how it works, and where it still falls short.
Say it to the right person. Keep the key in your own hand.
To deliver a message, the network has to know some things. We would rather tell you exactly what.
| Information | Nodes |
|---|---|
| Message text, and the content and names of photos, voice messages and files | Cannot see |
| Your profile, such as nickname and avatar | Cannot see |
| Group names and announcements | Cannot see |
| Group member lists (not stored on nodes) | Cannot see |
| Your IP address and connection identity | Visible to the entry node you connect to |
| When and how often you send messages | Visible to the entry node you connect to |
| Who your messages are addressed to | Visible to the entry node you connect to |
The sender is hidden when nodes relay messages to each other, and offline messages are tied only to a mailbox ID that changes every day. The entry node you connect to, however, still knows who you are talking to.
When your contact is offline, the message is stored as ciphertext on several nodes. Those nodes only see a mailbox ID that changes daily and the ciphertext — not the sender or the recipient — and only the recipient can prove the right to collect it. Messages are kept for up to 30 days.
A security page only means something if it is honest about the limits.
