The Jimmyinator is designed around local encryption.
Last updated June 13, 2026.
What the service stores
The Worker stores encrypted message ciphertext, non-secret encryption parameters, lifecycle metadata, retention timestamps, and aggregate usage counters.
The visible Jimmy text is used as a lookup alias. New message handles are generated by the server and are not shown on the public stats page.
What stays in your browser
Plaintext messages, passwords, profile names, AES keys, and derived keys stay in your browser. Saved profiles are local browser convenience records and are not sent to the Worker.
The stats system may receive only the number of local profiles reported by your browser, not profile names or passwords.
Usage statistics
Stats use a random browser install ID stored in local storage. The Worker hashes that ID before storing it so the public stats page can count anonymous browser installs.
Aggregate counters include encodes, reported successful decodes, fetch requests, lifecycle choices, retained encrypted records, theme reports, and fun Jimmy-shape totals.
Cookies and third parties
The app does not use cookies, third-party analytics, remote fonts, or third-party runtime scripts. Cloudflare hosts the Worker, static assets, KV records, and Durable Objects used by the app.
Retention
Jimmy messages use the app's retention settings and may also expire through scheduled expiration or self-destruction. Aggregate counters may outlive individual encrypted messages.
Your controls
You can clear local profiles, theme choice, and the anonymous stats browser ID by clearing site data in your browser. Clearing site data may remove your ability to use saved local profiles.
Local Data Controls
These controls only affect this browser. They do not delete encrypted messages already stored by the Worker.
No local data action yet.
Contact and abuse
For removal, abuse, or privacy requests, use the contact channel published with the jimmyinator.weezer.blue site or the repository owner for this deployment.