Privacy policy
Data controller
The data controller is Due IRC Client. For any request concerning your data you can write to due@dueirc.com: it is the controller's contact channel and it is read directly by the people running the service.
What data we collect
Registration data: username, email address and password. The password is never stored in clear text, only as a bcrypt hash.
Conversation content: the messages of the channels and private conversations you take part in are stored on our servers, because that is what makes it possible to find the conversation again when you return.
IRC network configuration: host, port, nickname and any network authentication passwords, which are stored encrypted (AES-256-GCM) and decrypted only at the moment of connecting.
Images and voice messages you upload, stored as files on the server. The file is reachable from a public address, not protected by a login: this is a design choice, because it lets people in the channel who use a traditional IRC client see the image as well. The filename is random and appears nowhere, but anyone who obtains it can open it without authenticating, even after the message has dropped out of the history.
Technical data needed to run the service: connection IP address, access times and system logs.
Poll votes from the public page: if you vote in a poll from the link received in chat, even without an account, we keep the option you chose together with a random identifier for your browser (the technical cookie due_pv) and your IP address. They exist to prevent the same browser from voting more than once and to limit automated votes; they do not identify you and are shown to nobody, not even to whoever opened the poll, who only sees the totals.
Why we process it
To provide the service you asked for: connecting you to IRC networks, giving your history back, showing avatars and attachments. The legal basis is the performance of the contract.
For the security of the service and the prevention of abuse, on the basis of legitimate interest. Uploaded images go through an automated content check.
To send you service emails: address verification, notices concerning your account. We do not send marketing communications.
For how long
Messages on standard accounts are kept for three days; on premium accounts for seven. During the beta every participating account has the premium plan.
Attachments follow the same logic, with a per-tier duration set by the administrator.
Closed polls are deleted, together with their votes and the technical data accompanying them, thirty days after closing. A poll that stays open stays stored until somebody closes it.
Account data remains for as long as the account exists. If you request deletion, the account, its configurations, messages and attachments are deleted.
Who we share data with
Nobody for commercial purposes: your data is neither sold nor transferred.
The servers are hosted with Hetzner Online GmbH (Germany), acting as data processor.
Emails are delivered through the configured SMTP service, OVHcloud (France).
Both providers operate within the European Union: your data is not transferred outside the European Economic Area.
One technical point specific to IRC is worth keeping in mind: the messages you send in a channel travel through the servers of the IRC network you connect to, which is not run by us and has rules of its own. The same applies to your connection address, visible to the IRC network according to its own policies.
Where the feature is enabled, we assign each user a stable IPv6 address taken from a subnet of ours, and use it as the source address of all your outgoing IRC connections. It is not merely an address observed in passing: it is a persistent identifier, assigned on the first connection and kept forever, identical across every IRC network you configure, and it is disclosed to the IRC networks you connect to, according to their policies.
Your rights
You may at any time request access to, rectification of, erasure of, restriction of and portability of your data, and object to processing based on legitimate interest. Write to due@dueirc.com: we reply within thirty days.
You may also lodge a complaint with the competent supervisory authority; in Italy this is the Garante per la protezione dei dati personali.
Last updated: 2026-09-15
This is an English translation provided for your convenience. The Italian version is the legally binding one; in case of any discrepancy, the Italian text prevails.