PRIVACY
Privacy, in plain English
No legalese padding. Here is exactly what this website collects, what the junto app does, and what it never does.
This website
This site (junto.watch) uses Vercel Analytics, which counts page views in aggregate. It sets no cookies, shows no consent banner because there is nothing to consent to, and does not build a profile of you or track you across other sites. We see rough numbers like “the install page got N views this week”, and nothing that identifies you.
The junto app
The junto command-line tool has no accounts and keeps no profile of you. It talks to the free public nostr relays that coordinate your room and to the peers in that room directly. There is one small exception, an anonymous usage ping, and you can turn it off completely. More on that just below.
- No accounts. There is nothing to sign up for and no identity to store. A room is just a code.
- Encrypted coordination. Every play, pause, seek, and the room code itself are NIP-44 encrypted end-to-end before they leave your machine. Relays pass along ciphertext and can read none of it: not the filename, not your activity.
- Files stay peer-to-peer. Your media transfers directly between friends over WebRTC and is SHA-256 verified. No third party, including us, ever holds or sees your file.
- No catalog, no content. junto provides no media. It only syncs files you already have.
Anonymous usage ping
When you create or join a room, junto sends a single anonymous ping so we can tell whether things actually work in the wild. Here is the entire list of what it includes: the event (create or join), the junto version, your operating system and architecture, whether it succeeded and a rough reason if it did not, relay latency, and, if you were streaming a file, how long the first frame took and whether the transfer finished.
That is all. It carries no personal data, no room code or secret, and no file names, so it cannot say what you watched or who you watched it with. The very first run prints exactly this before anything is sent, it is fire-and-forget with a short timeout so it never slows you down, and you can switch it off for good with --no-telemetry or by setting telemetry = false in your config file. Off means off: nothing is sent.
Third parties
The website is hosted on Vercel, which processes standard server request logs (such as IP address) to serve and protect the site, as any web host does. The app relies on independent public nostr relays for coordination; those relays only ever see encrypted messages. junto is not affiliated with any relay operator.
Changes
If this policy ever changes, the update will appear here and in the project’s changelog. junto is open source ↗, so you can verify these claims in the code yourself.
No cookies, ever.