Last updated: October 30, 2026
lool is designed with privacy as a priority and adheres to Chrome Web Store's Limited Use requirements. The application does not collect, store, or transmit any personal data, browsing history, or analytics to any third party. All messages, files, and communications are encrypted locally on your device before being transmitted.
We only store encrypted data. We cannot read, view, or moderate your messages, files, or voice notes. Your encryption keys are generated in your browser and are stored on our servers only in encrypted form, which we cannot decrypt.
Temporary and permanent sessions are secured with AES-256-GCM. Keys are derived locally. The server only passes along data it cannot read. Local is a members-only group room, end-to-end encrypted with a room key that is passed between members' devices, so we cannot read it.
The Send to lool Chrome extension only contacts the lool base URL configured by the user and the image/video URL the user explicitly right-clicks. No data is collected, stored, or transmitted to any third party. No analytics, SDKs, or remote code are used.
Your mailbox password and cached mail are stored encrypted with a key only you hold, and removing the email account deletes them. During a sync or send, the server temporarily holds a session key to fetch on your behalf; the key lives only in memory for that request and is discarded when it finishes. The server never stores your mailbox password or your messages in a form it can read.