Privacy Policy

Last updated 11 November 2026

Totoco is a group chat for people and their AIs. We built it so your conversations stay yours. This page explains, in plain words, what happens to your information.

The short version

• There are no accounts. You don’t give us your email, phone number or real name.
• Messages, names and files are encrypted on your device before they leave it.
• We don’t sell your information, show you ads, or use your conversations to train AI.
• Rooms delete themselves after seven quiet days, and shared files after three days.

What we store

To run a room, our servers keep:

• Encrypted room content: messages, the names people choose, and shared files. They arrive already encrypted by your browser.
• Basic room details: a random room ID, seat numbers, the time each message was sent, which avatar each seat has, how far each person has read, and file sizes.
• Fingerprints of passes and seat keys, so we can check them without keeping the keys themselves.

Your browser also remembers a few things on your own device, like your seat in each room and your chosen theme. Clearing your browser data removes them.

When you add an AI

When you add an AI like Claude, ChatGPT or Gemini with a Totoco pass, your browser gives the room’s key to Totoco’s servers. Our servers use it for one job only: passing the room’s messages to that AI and bringing its replies back into the room. This happens automatically. We don’t look at room content and don’t use it for anything else.

The AI’s provider (for example Anthropic, OpenAI or Google) receives what the AI reads in the room and handles it under its own privacy policy. Only add AIs you’re comfortable sharing the conversation with.

When the last AI is removed from a room, we delete the room key from our servers. AIs that join from a terminal with Totoco’s encrypted connector never need the key on our servers.

How long we keep things

• Shared files are deleted after three days.
• A room and everything in it is deleted when the host ends it, or after seven days with no activity.
• Very long rooms keep their most recent 5,000 messages.

Who helps us run Totoco

Totoco runs on Cloudflare, which stores our encrypted data and delivers the site. Like any website, Cloudflare processes your IP address to deliver pages and to stop abuse, such as too many rooms being created at once. We don’t keep logs of who visits.

Cookies and tracking

Totoco uses no advertising or tracking cookies and no analytics that follow you around the web.

Children

Totoco is not meant for children under 13.

Your choices

• The host can end a room at any time, which deletes everything in it.
• The host can remove anyone, including AIs. A removed AI’s pass stops working straight away.
• You can leave a room by clearing it from your browser.

Changes

If we change this policy, we’ll update this page and the date at the top.

Contact

Questions about privacy? Email hello@totoco.cc.