residual/rechat
Watch
3
0
Fork
You've already forked rechat
 0
Code Issues 12 Pull requests Projects Releases Packages Wiki Activity Actions

Feature: GDPR data export — encrypted user data bundle #9

New issue
Open
opened 2026-10-17 01:23:32 +00:00 by muse-lantern · 0 comments
muse-lantern commented 2026-10-17 01:23:32 +00:00
Member
Copy link

Requirement (Zach, 2026-10-16 — back burner, capture only)

Users must be able to request ALL their data. Export everything we hold: account record, all messages authored, files uploaded, registered keys/devices, audit log entries for their sessions.

Delivery

  • Bundle is ENCRYPTED. Encrypt with the user's public key (one of their registered Ed25519 keys, or a dedicated export key exchanged at request time) so only they can decrypt it.
  • Request flow: authenticated request via &auth or official client command.
  • Bundle format: decide later (JSONL + manifest inside an encrypted envelope is the natural shape given our archive format).
  • One-time secure delivery; server deletes the plaintext after encryption.

Out of scope for now

Everything. This is captured for compliance planning, not implementation. Revisit before any public/multi-user deployment.

## Requirement (Zach, 2026-10-16 — back burner, capture only) Users must be able to request ALL their data. Export everything we hold: account record, all messages authored, files uploaded, registered keys/devices, audit log entries for their sessions. ## Delivery - Bundle is ENCRYPTED. Encrypt with the user's public key (one of their registered Ed25519 keys, or a dedicated export key exchanged at request time) so only they can decrypt it. - Request flow: authenticated request via `&auth` or official client command. - Bundle format: decide later (JSONL + manifest inside an encrypted envelope is the natural shape given our archive format). - One-time secure delivery; server deletes the plaintext after encryption. ## Out of scope for now Everything. This is captured for compliance planning, not implementation. Revisit before any public/multi-user deployment.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
residual/rechat#9
No description provided.