Privacy

Ferry has no account and no sign-in. What you share goes from your device to the person you chose, encrypted on the way. If their device is away, Ferry's servers can hold it, still encrypted, until their device picks it up, and never longer than 72 hours.

Apart from this website, the only servers Ferry runs are its own relays. When two phones cannot connect to each other directly, a relay passes the encrypted data along between them. A relay cannot read what it passes along, because only the two phones hold the keys. While a connection lasts, a relay sees the IP address and the relay key of each phone, when it connects and how much it sends. The relays write no logs, and store no IP address, relay key or timing. The only thing they keep is an encrypted item waiting for a device that is away, in memory only, until it is picked up or its 72 hours run out.

A goodbye after you unpair is left again every 72 hours, for up to 30 days.

The relays run in the United States, on servers rented from a hosting provider. Like any network operator, the hosting provider can see which IP addresses exchange traffic with those servers, when and how much, but it cannot read the data.

Ferry has no analytics, no ads and no tracking. This page loads nothing from anywhere else.