Skip to content

Security: GhostCorpTech/chat-viewer

Security

SECURITY.md

Security Policy

Supported versions

Only the latest release receives fixes.

What ChatViewer does with your data

Worth stating plainly, because the app handles private conversations:

  • Chat exports are parsed locally and stored in a SQLite database at %LOCALAPPDATA%\chat-viewer\archive.sqlite3.
  • Media files are never copied. The database stores absolute paths into your export folder, and the app reads them on demand.
  • The app makes no network requests. There is no telemetry, no crash reporting, no auto-update, and no account.
  • The only outbound action possible is the GhostCorp link in the sidebar, which opens in your normal browser when you click it.
  • Uninstalling the app does not remove the database. Delete %LOCALAPPDATA%\chat-viewer\ yourself if you want the imported data gone.
  • "Delete message" and "Delete chat" affect the local database only. Your original export files are never modified.

Reporting a vulnerability

Email tech@ghostcorp.online with a description and reproduction steps. Please do not open a public issue for a security problem, and do not include real chat content in the report.

Expect an acknowledgement within a week.

There aren't any published security advisories