April 26, 2026
Messages are held in encrypted form long enough to be delivered, then kept encrypted until the auto-deletion timer expires, after which they are cleared. No readable archive sits on our servers.
When you send a message, it's stored encrypted just long enough to reach the recipient. Once delivered – or, for timed messages, expired – it's removed. EXTRA SAFE does not keep long-term, readable message archives.
Your device caches recent messages locally. Ephemeral timers govern how long they stay there. When the timer expires, they're gone from both devices.
A breach of our servers would expose encrypted payloads – not readable messages. The keys to decrypt them don't exist on our infrastructure.
Related articles:
- •
What are disappearing messages?
- •
How does E2EE work?
- •
What data does EXTRA SAFE collect?
- •
What is a self-owned messenger?
- •
What happens when I switch devices?