gizmoriftPrivacy & trust
A few essentials. No ad tracking.
Gizmorift uses browser storage to keep you signed in and remember your preferences.
Sign-in cookies
The necessary gizmorift.sid cookie maintains your session. It is HttpOnly, so application JavaScript cannot read it; it uses SameSite=Lax and is Secure on the production HTTPS deployment. Sessions expire after 14 days, or 5 minutes during an unfinished multifactor challenge.
Your device preferences
Local storage remembers choices such as language, theme, text size, accent, spacing, sound, backgrounds, conversation sorting, chess-board appearance and whether you dismissed the beginner welcome. No advertising identifier or advertising-consent identifier is stored by the application.
Unsent messages in this tab
Session storage keeps readable text drafts and the latest send-request details separately for each account and conversation. Reloading the same tab restores drafts, and signing out clears them. They do not sync to other devices. Selected files are not saved in draft storage. If storage is unavailable, the composer asks you to keep the tab open.
Notifications and device permissions
Enabling browser push notifications creates a subscription managed by your browser and a service worker for receiving notifications. Gizmorift stores the push endpoint and encryption keys with a session reference on the server. Browser permissions control notifications, camera and microphone access. Notification previews can appear on the lock screen; choose neutral previews in Settings if needed. Scanning a friend’s QR code uses your camera only after permission.
Your controls
Sign out to end the current session, or revoke sessions in Settings. Browser controls can clear cookies, local storage and session storage; this resets sign-in and device preferences. Blocking the sign-in cookie prevents authentication. Camera, microphone and notifications use your browser’s permission controls.
Network providers
Cloudflare may use its own security cookies and process network metadata, depending on deployment configuration. The signup check runs through Gizmorift without an external verification provider. Calls can contact public STUN services. These providers operate under their own policies.
Advertising and analytics
Gizmorift serves its own member ads, including image ads. It may also show official plan offers. No AdSense code, third-party advertising pixels or analytics SDKs are enabled. Private conversations are not used for advertising profiles. Session storage remembers a 30-minute ad dismissal. Ad preferences are saved to your account; ad delivery uses the existing sign-in session and no extra tracking cookie.