Last updated: July 2026
Summary: This website (oshi-messenger.com) uses no third-party tracking, no analytics and no advertising. Fonts and scripts are served from our own server, so your IP address is not shared with third parties as you browse. We set one first-party cookie only to remember that you have seen the cookie notice. The OSHI app itself is separately end-to-end encrypted and collects no personal data.
This policy explains how the OSHI website (oshi-messenger.com) handles information when you visit it, and summarises the privacy design of the OSHI mobile app. The website and the app are operated by Hugo Moriceau / Moriceau Lab, Switzerland (the “data controller”). For any privacy question you can contact contact@oshi-messenger.com.
We have deliberately built this website to minimise data processing:
The website uses only first-party, strictly functional storage. It does not use any tracking, advertising or analytics cookies.
None of these identify you or track you across other websites. They are strictly necessary to honour the preferences you set, and no marketing or tracking cookies are used.
Some pages offer an optional promotional video. Nothing is loaded from YouTube unless you actively click to play it: the player is shown as a static “click to play” placeholder, and only when you click does it load — via youtube-nocookie.com (YouTube’s privacy-enhanced mode). If you choose to play the video, YouTube (Google) then receives your IP address and its own privacy policy applies.
If you enable push notifications in the OSHI app, the device registers with our push service so notifications can be delivered (and, where relevant, routed for regional reachability). This registration processes a device token and the connecting IP address for the sole purpose of delivering notifications. This concerns the app feature, not browsing this website.
Under the EU/UK GDPR and the Swiss FADP you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability, to withdraw consent and to lodge a complaint with a supervisory authority. Because the website holds no account and builds no visitor profiles, in most cases we hold no personal data about you to act on — but you are welcome to exercise any of these rights by emailing contact@oshi-messenger.com.
End-to-end encryption: Messages are encrypted on your device (AES-256-GCM, X25519 key exchange, Double Ratchet) before being sent; only the intended recipient can decrypt them. We never hold your keys or your message content.
No account required: Your identity is a cryptographic key pair generated on your device. We do not ask for a phone number, email or name.
Stored on your device only: Your keys, your contacts’ public keys, your message history and app preferences stay on your device unless you explicitly send or share them.
Decentralised delivery: Messages travel via local mesh, IPFS (encrypted; auto-deleted after 30 days) or Tor. The app’s only third-party services are IPFS/Pinata (encrypted storage) and the Apple App Store. No analytics, advertising or tracking SDKs are used.
OSHI is open source. You can audit the code to verify these claims: github.com/Lastoneparis/OSHI.
If we change this policy we will update the “Last updated” date above. Material changes affecting the app may also be announced in the app.
Questions about privacy? Contact the data controller (Hugo Moriceau / Moriceau Lab, Switzerland) at contact@oshi-messenger.com.