Privacy by Design

Built-in, not bolted-on

Signals is designed from the ground up to be privacy-compliant without sacrificing functionality.

No Personal Data Collection

Signals never collects, stores, or processes personal identifiable information (PII).

  • No IP address storage
  • No device fingerprinting
  • No persistent user identifiers
  • No cross-site tracking

Ephemeral Context Keys

Session approximation using short-lived, non-reversible hashes.

  • ContextKey expires after session
  • Cannot be used to re-identify users
  • Hashed from anonymized data only
  • No cross-device correlation

Consent-Aware Processing

Different data flows based on user consent levels.

  • Anonymous events buffered by default
  • Consent gates data forwarding
  • Granular permission controls
  • Automatic compliance enforcement