Security & Moderation

Your conversations are protected in three layers, and rooms are kept safe by people and automatic tools working together.

In transit

Everything between your device and Treeova travels over encrypted HTTPS.

Room messages

Encrypted again with AES-256 before they are saved. Stored copies are unreadable.

Private DMs

End-to-end encrypted on your device. Only you and your friend can read them — not Treeova.

What we actually store

A room message as it appears to you, next to a real stored record captured from our database:

What you see

Wet-test shell check — SPY

What's stored

ww0ECQMC5QTUwAOTBx5k0mABCfsjbbjWY++xo+i5fvnEih6dkF7fBmQVg0ANDywSjxbXvj9+6EmW1T0s…

SPY room chat with a note under the messages saying they are encrypted in storage — Live $SPY room. The line above the message box confirms posts are encrypted in storage.

End-to-end encrypted DMs

The first time you open a DM you set a passcode. It locks a private key that is created on your device.
Messages are encrypted before they leave your device and decrypted only on the other person's device.
Your passcode never leaves your device. On a new device, enter it to unlock your DMs.
Forgot it? You can reset, but older DMs become unreadable — we can't recover them, by design.

Austin's encrypted DM conversation with Nate — Austin's view: the conversation decrypts on his device.

Nate's encrypted DM conversation with Austin — Nate's view of the same conversation, decrypted on his device.

Austin's first message, as Treeova stores it

body: "🔒"
ciphertext: "YZNtz5hsfxK3uIuAMDiW+S70s7FCbnPC5gz0XvtXjyesivW0rY5aoFNCN97fpxc/OOSuPZUTH0TdvA+3OS3Le6rvXEAKMKMhbso1Yly5NHcc9ML/yMo="
iv: "tpU8F6coxl0WO06W"

No readable text is ever stored or sent to our servers.

How moderation works

Automatic filters

Word filters, spam slow-mode and promotion checks run before a message is saved.

Reports

Any member can report a post. Moderators review it in a private queue.

Block & ban

Block anyone instantly. Room owners and staff can remove or ban members.

Retention

Room messages auto-delete after 2 years. Deleting your account erases your messages and DMs.

Moderation queue showing a reported message with remove, action and dismiss buttons — Moderator queue during a wet run: reviewers can remove the post, take action, or dismiss.

Room messages can be reviewed by moderators so rooms stay safe. DMs can't be read by staff; if a DM bothers you, block the sender and email support. Read more in our Privacy Policy and Terms.

Found a security issue? Email support@treeova.com.