A Small Detail Can Still Link to Real Identity
A workplace, city, schedule, or unique experience might seem ordinary alone, but combined they could reveal who you are. Check for identifiable details before sending.
Saying "Work was exhausting today" is fine; no need to name the company, team, or commute route. Expressing feelings and revealing identity are two different things.
Certain Info Should Never Enter Group Chats
Never send passwords, verification codes, account recovery credentials, ID numbers, wallet private keys, or payment card details. Do not expose them inadvertently in screenshots.
Never treat friendliness, a random nickname, or private room status as trust justification for payment requests.
Private Rooms Are Access Restrictions
Private rooms require a room number and password to join and do not appear in public discovery lists; hosts can also require admission approval.
ODO does not provide end-to-end encryption and cannot prevent participants from taking screenshots, copying, or saving content.
Restricting who can enter and guaranteeing that content cannot be saved are two different matters. Even in a small room, preserve your personal boundaries.
End and Deletion Have Defined Boundaries
Message content submitted during a report is encrypted and saved as evidence for moderation during the room duration, and deleted along with room records upon closure.
Account, device credentials, membership, and payment info are retained independently from rooms; room closure does not mean these records are deleted.
Deletion upon room closure cleans up application database records and caches, which is distinct from physical disk, WAL, or historical backup overwrites. Offline devices clear page content once back online or notified.
When Uncomfortable, Just Stop
You can choose not to answer, stop replying, block members, report, or leave. Refusing to share personal info requires no excuse and should never invite interrogation.
See Privacy & Data Policy and Safety & Boundaries for full details.