Sparkler Room

Privacy Policy

Last updated: 3 September 2026

Sparkler Room sends files and messages directly between devices that have paired with each other. There is no account, no profile, and no server that stores what you send.

This policy describes exactly what the app does with your information. It is short because the app does very little.

What we collect

Nothing.

We operate no service that receives, stores, or processes your data. We have no database. There is no account to create and no identifier that follows you between rooms.

Specifically, Sparkler Room does not collect:

• your name, email address, phone number, or any contact details
• your location
• analytics, usage statistics, crash telemetry, or advertising identifiers
• the content of your messages or files
• a record that a room ever existed

What stays on your device

• Files you receive are written to the app's private storage on your device. They are excluded from iCloud and iTunes backups. In a room where the host turned off saving, they are deleted when the room ends.
• A display name, if you choose to type one, is sent to the room you are joining so other people see something friendlier than a short identifier. It is not stored anywhere by us and disappears with the room.
• One preference: whether you have already seen the note explaining the limits of the room restrictions.
• A count of relayed bytes. When a direct connection cannot be made and traffic is forwarded through a relay, the app keeps a running monthly total of how many bytes that was. It is a number, not a history — no filenames, no times, no destinations — and it is used only so the app can reason about its own usage on your device. It is never transmitted anywhere. If that ever changes, it will be disclosed here first and asked for separately.

Deleting the app removes all of it.

How your data travels

When two devices are in a room together, their traffic is encrypted end-to-end using the WireGuard protocol. Encryption keys are generated on your devices and never leave them.

Devices usually connect directly to each other. When a direct path cannot be established — some mobile and office networks prevent it — traffic is forwarded through a relay server we operate at derp.sparkler.direct. The relay:

• forwards encrypted packets and cannot read them, because it does not hold the keys
• necessarily observes the IP addresses of the devices connecting through it, as any network equipment must in order to route traffic
• does not log that information, and does not retain it

The app shows you which kind of connection you have. A "Direct connection" badge means no relay is involved at all.

Permissions

The app requests exactly one permission:

• Camera — used solely to scan a room's pairing code. Nothing is recorded or stored, and no image from the camera leaves your device.

When you attach a photo, iOS presents its own photo picker. That picker runs outside the app, so Sparkler Room never receives access to your photo library — only the single image you deliberately pick.

Room restrictions, honestly described

A host can turn on restrictions: block saving, block screen capture, and be alerted to screenshots. These are enforced by the app on each device.

They are not DRM, and the app does not pretend otherwise. Someone running a modified version of the app, or simply photographing their screen with another device, is not stopped by any of them. The app tells peers this directly whenever restrictions are in force.

Children

Sparkler Room is not directed at children and collects no information from anyone, including children.

Changes

If this policy changes, the revised version will be posted here with a new date. Because we hold no data, a change cannot retroactively affect anything we have stored — there is nothing stored.

Contact

Questions, concerns, or reports about misuse of the app:

support@sparkler.direct

We aim to respond within a few business days.