Effective October 22, 2026, revised the same day (saved history, update checks, abuse reports, language filter, account deletion). Applies to the Y2K Messenger iOS app.
Y2K Messenger has no accounts, no server and no database of its own. It is a client for third-party chat servers that you choose. Four kinds of data exist, held by four different parties: your server account (screen name, password, buddy list, messages) is held by the server operator; on-device data (settings, saved conversations, a remembered password in the Keychain) stays on your phone; usage statistics (counts and device facets under a hashed per-install code) go to TelemetryDeck and can be turned off; and abuse-report emails you choose to send reach our mailbox. We receive only the last two.
Your screen name, a one-way digest derived from your password (the password itself is never transmitted), your buddy list and privacy settings, your messages, away message and profile. The server operator, not us, controls that data under their own terms and privacy policy. The default server is logon.chat; its registration page is at logon.chat. The app's default connection to logon.chat uses unencrypted TCP. We have not verified a supported TLS endpoint. The app can use TLS with a server you add yourself when that server offers it. Nothing is end-to-end encrypted: the operator of any server can read what passes through it.
By default the app sends anonymous event counts to TelemetryDeck GmbH (Germany): app launches, the 18+ confirmation, the "Create a screen name" link opened (and whether you came back to the app afterwards), sign-on started, succeeded or failed (with a coarse reason such as "unreachable"), session length bucket, number of messages sent bucket, which features were used (away message, buddy or group added, privacy mode, warn, invite shared, a setting changed), and crash reports consisting of an error message and the first stack frame. Each signal also carries the app version, iPhone model, iOS version, language, time zone and screen size, and a per-install code: a random identifier the app generates on first launch and never shows you. The app hashes that code (SHA-256) before sending it, and TelemetryDeck states that it hashes it again with its own secret so that neither it nor we can recover the original; we rely on that statement and have not verified it ourselves. The app does not show you the code, so we have no way to identify which signals are yours. TelemetryDeck states that deletion of data is available on request to them; whether that can be applied to a single installation is unverified. Never sent: screen names, buddy names, message text, away or profile text, or the hostname of a custom server. Turn this off at any time in Settings → "Share usage data". TelemetryDeck's policy: telemetrydeck.com/privacy.
When the app launches it asks Expo's update service (u.expo.dev) whether a newer JavaScript bundle of the app exists and downloads it if so. That request carries the app version and update channel, nothing about you or your chats.
Report a user from their info screen, or from Block in an IM window. The app composes an email in your own Mail app to mike@productparty.us containing the reported screen name, the server, your screen name, the reason and details you type, the app version, whether the block succeeded, and, only if you attach them, up to ten of that person's last messages to you (unfiltered text). You see the whole email before Mail opens and you send it yourself; the app cannot tell whether you did. We review abuse reports. This inbox is not monitored continuously. Emails we receive are kept as long as needed to review them. Only the server operator can act on a screen name; we have no confirmed contact with the logon.chat operator yet, so we cannot promise escalation.
We are not aware of any other connection the app makes. Links in messages open in Safari only after you confirm. "Get a free screen name" opens the server's registration page (for logon.chat, logon.chat/register) in Apple's in-app Safari view: what you type there goes to that server, and the app cannot see the page or anything you enter on it.
Your sign-on preferences and saved away messages are stored locally. If you turn on "Remember password", the password is stored in the iOS Keychain on that device only. Conversations are saved on your phone, per screen name, so they are still there after you sign off or relaunch ("Save chat history on this phone", on by default). Turn it off in Settings to stop saving and erase what is stored, or tap "Clear chat history". Offensive language in text you receive is masked on your phone by default ("Filter offensive language"); the stored message is not changed and nothing is sent anywhere. Local data may be included in your device backups; clearing data in the app does not remove copies already in a backup.
The app is rated 18+ and is not directed to children. We do not knowingly collect information from anyone under 18; as described above, we collect no personal information from anyone.
Four things, four places:
If this policy changes, the new version is posted here with a new effective date. Contact: mike@productparty.us.
Y2K Messenger is an independent app by Mike Watson. It is not affiliated with, endorsed by, or connected to AOL, Yahoo, or any chat server operator. © 2026