Privacy policy

Last updated 12 October 2026

Paister moves the text messages your Android phone receives to your own computers and fills verification codes into your browser. It is built so that nobody else, including us, can read them. This page covers the Android app, the desktop apps, the browser extensions and the relay at api.paister.ir.

What stays on your devices

Message text, senders and codes are stored only on your phone and on the computers you linked to it. They are encrypted on the phone with AES-256-GCM before they leave it, using keys that only your devices hold. You can delete them in the apps at any time.

What the relay sees

Your devices exchange encrypted messages through our relay. It stores each encrypted message until your computer confirms it arrived, and at most 24 hours. It cannot decrypt them. It also keeps the random device identifiers and hashed access tokens your devices use, and deletes links that stay unused for 30 days. Your network address is used to limit abuse and may appear briefly in server logs. There are no accounts, names, phone numbers, contacts, analytics or advertising.

The browser extension

The extension talks only to the Paister desktop app on the same computer (127.0.0.1). On the pages you visit it looks for verification-code fields so it can offer and fill a code; it does not read page content beyond form field attributes and labels, and it sends nothing from the page anywhere. It stores its pairing token and your display options in the browser.

Updates and downloads

The apps check paister.ir for new versions. Like any website, paister.ir sees the address and browser details of requests it serves.

Sharing

We do not sell, share or transfer your data. We have no access to the content of your messages to share.

Contact

Questions: apps@imvx.org.