BlackHeartGo ("we", "us", "the app") is a private, ephemeral messaging tool built by Black Heart Research. This policy explains — plainly, without legal padding — what data the app touches, what it doesn't, and how it's handled.
This policy covers everyone who uses BlackHeartGo: chat rooms, Secret Notes, and any related feature on this domain.
That's it — that's the whole list:
We do not collect your email, phone number, location, device identifiers, or any account information — because there is no account. There is no sign-up, no login, and no password recovery, because there is nothing to recover.
Chat rooms: Messages are end-to-end encrypted in your browser using AES-256-GCM with keys exchanged via ECDH (P-256) before they're sent. Our server only ever relays the encrypted ciphertext in transit, and nothing is stored there — we cannot read your messages, and we don't have a way to. A room and everything in it is deleted the moment either person disconnects or leaves.
Secret Notes: A note is encrypted on your device before it's ever sent anywhere. If you set a password, only someone with that password can ever decrypt it — we cannot. If you choose "None" or "Time Capsule" lock, the note is still encrypted before storage, but the app uses a fixed internal key rather than one only you know; this protects the note from casual exposure but is not a substitute for password-locking anything genuinely sensitive. Notes are deleted automatically the first time they're successfully opened, or you can choose not to create one at all.
Chat rooms and their messages are deleted automatically when the room closes. Secret Notes are deleted automatically once opened (or remain encrypted on our server, unread, until someone opens the link). We don't keep backups of deleted rooms or notes.
BlackHeartGo is not directed at children and is not intended for use by anyone under 18. We don't knowingly collect information from children. If you believe a minor has used the service inappropriately, contact us using the details below and we'll act on it.
Because we hold almost no identifying data, there is generally nothing to request, correct, or export. If you have a specific privacy concern or believe something you shared is still on our servers and you'd like it removed, contact us and we'll look into it.
If this policy changes in a way that matters, we'll update the date at the top. Continued use of the app after a change means you accept the update.
Questions about this policy: blackheart-team@proton.me.