Most messengers still require a phone number, sync your address book, and build a central social graph. StateZerØ is built on a different principle: as the developer, I have no mechanism to read your messages, view your attachments, or access your cryptographic secrets. The server is designed to act only as a relay for encrypted payloads and short-term storage for encrypted blobs. It cannot decrypt content. Routing identifiers, sender/recipient pointers, and delivery timestamps are the minimum metadata required for transport; they are never content, never sold, and protected with field-level encryption at rest.

⚡ Feature Comparison: StateZerØ vs. Mainstream Apps

NO PHONE NUMBERS. NO EMAIL. MINIMIZED METADATA.

Mainstream apps build central social graphs by harvesting your contact list and binding your identity to a SIM card. StateZerØ does not require a phone number, email, or real name. Contact discovery uses single-use invite codes and mutual-consent requests, not address-book uploads. Transit payloads are retained only as long as operationally necessary: delivered messages up to 24 hours, acknowledged messages immediately, undelivered up to 72 hours. Stored routing identifiers are blinded where possible, and searchable fields are hashed. Public discoverability is off by default.

🌟 Unrivaled Market Advantage: Integrated Encrypted Space & Vault Sharing

Unlike mainstream messengers, StateZerØ ships with a dedicated, embedded encrypted file manager built directly into the application.

While other apps export sensitive attachments to your device's unencrypted public gallery or shared downloads folder, StateZerØ isolates your documents, photos, audio, and videos inside a dedicated, cryptographically protected environment — the Sovereign Vault and Encrypted Space. You do not need third-party vault tools or risky external apps: everything is stored, managed, processed safely, and shred-deleted natively within the platform.

Direct Vault-to-User Sharing: You can securely share any encrypted file stored inside your Vault or Encrypted Space directly with other StateZerØ users. By re-using the original encryption keys, files are re-wrapped and transmitted end-to-end without ever exposing raw data to the network.

🔑 The Master Key: Absolute Account Ownership

Your 12-Word Mnemonic Seed is your Master Key — it is the absolute, unchallengeable proof of account ownership.

• Developer Zero-Visibility: I do not store your password, seed, or recovery details on my servers, and the relay is designed so I cannot read your messages or attachments.
• Absolute Authority: You, and only you, hold access to your identity and data.
• Irrecoverable by Design: Because my server has no decryption capability, if you lose your 12-word sequence, even I as the developer cannot retrieve or restore your account. There are no backdoor resets, no admin overrides, and no customer-support recoveries. Your 12 words are your only recovery tool — keep them offline and secure.

🛡️ Complete Feature Breakdown & System Capabilities

1. Identity Sovereignty & Hardware Scarcity

• Zero Personal Identifiers: Registration requires no phone numbers, SIM cards, or email addresses.
• 12-Word Master Key (BIP39): Your 256-bit cryptographic seed generates your entire identity locally. Passwords can only be reset locally using your 12-word seed.
• Device-Bound Identity & Single-Seat Rule: A device-bound Android Keystore key and hardware-derived fingerprint bind your account to your phone, enforcing a one-account-per-device policy that blocks automated bot networks.
• Safety Number & Blind Discovery: Users are hidden from public search indexers by default. Connect using single-use 6-character codes, QR codes, or direct 16-character Safety Numbers. Real contact names are exchanged via post-handshake Olm end-to-end encryption so my relay remains blind to profile content.

2. The Sovereign Vault, Encrypted Space & Direct Sharing

• Sovereign Vault Storage: Isolated, high-security local file management for sensitive videos, audio, photos, and files — accessible directly above the main dock.
• Inter-User Encrypted File Sharing: Send vaulted files directly to other contacts with a single tap. The platform re-uses the original encryption keys to deliver files seamlessly without exposing unencrypted media locally or to the network.
• Transcripts Encrypted Space: Text archives are saved into an isolated encrypted space, bypassing the system clipboard to reduce keylogger exposure.
• Secure Media Handling: Media is decrypted into protected app memory for playback and released when no longer needed. Exported files can be shredded on demand.
• Automated EXIF Metadata Scrubbing: File headers, GPS tags, device details, and camera timestamps are stripped locally prior to encryption.
• Private .ghost Encrypted Export & Reshare: Export any media item as an encrypted .ghost archive. Share .ghost packages directly via chat or the Vault; the relay sees only opaque encrypted blobs.

3. Encrypted Ghost Voice (Voice-Only VoIP Protocol)

• Encrypted Signaling: Call setup messages are encrypted inside the Olm chat ratchet, so the content of the signaling payload is not readable by the relay.
• Relay-Only Calls (IP Protection): Calls are forced through TURN relays (IceTransportsType.RELAY), so your IP address is not exposed directly to the peer.
• Native Dialer Log Masking: Integrated with the Android Telecom Framework via a Self-Managed ConnectionService. System-facing call metadata is masked, and call details are not written to the device's native phone dialer log; call history is stored strictly within your encrypted local app database.
• Hybrid AEC & Audio Hardening: Features a custom acoustic engine with Hybrid Echo Cancellation (AEC3) and automatic hardware auditing. System volume is programmatically synchronized with the communication stream to reduce hardware clipping and acoustic leakage.
• Visual Protection (Screen Security): Voice calls respect your Screen Security settings. When enabled, the OS is blocked from capturing active call screens in screenshots, screen recordings, or app-switcher previews.
• Encrypted Media Transport: Voice streams are encoded with Opus and transmitted via DTLS-SRTP. Temporary audio buffers are kept inside the app and cleared after use.

4. Advanced Media, Link Previews & Multi-Attachment Encrypted Spaces

• Multi-Attachment Encrypted Spaces: Send bundles of images, videos, and documents within a single message. Recipients can swipe through the bundle in an isolated unit, with individual items decryptable and savable directly to their Sovereign Vault.
• Dual-Tap Interactive Video: Features a dual-interaction lifecycle: a First Tap initiates secure inline playback, while a Second Tap transitions into full-screen viewing with frame position preservation.
• Local Forensic Link Previews: Web link previews are parsed locally on your device. Preview metadata (title, description, image) is stored within the Olm-encrypted envelope without executing external scripts or tracking cookies.

5. Forensic Destruction, Emergency Account Deletion PIN & Complete Account Deletion

• User-Controlled Local Persistence: Local history remains on your device until you delete it. Individual files can be overwritten before deletion; the SQLCipher database is removed when the app is wiped.
• Complete Account Deletion: Initiated from Account Settings or Logout, this deletes your account data on the server, purges active invites and keys, revokes your push token, and wipes the local app database. The device-bound identity marker remains occupied to preserve the one-account-per-device policy.
• Emergency Account Deletion PIN: Entering a pre-configured secondary PIN triggers a full account deletion and local wipe, displaying a generic network-error screen. This feature must not be used to destroy evidence, evade legal process, or harm another person's lawful interests.
• Biometric App Lock & Screen Security: Automatically locks the vault when the app is minimized, operating on a strict 2-second grace period. Native screen security blocks screenshots, screen recording, and app-switcher preview caching when the biometric lock is enabled.

6. Stealth Network Operations & Self-Healing

• Sonar / Ghost Mode (Network Invisibility): Toggles a server-side stealth status and masks socket-layer presence to appear "Offline" (Red Dot). Users can send and receive messages without broadcasting online presence.
• Blacklist Quarantine Shield: Blocked contacts are stored locally; messages from blocked senders are dropped inside the app before they reach your chat history.
• Time-Limited Relay Storage: Delivered payloads are retained up to 24 hours; acknowledged payloads are deleted immediately; undelivered transit data is automatically deleted after 72 hours.
• Silent Session Repair: If the Olm signaling state becomes desynchronized, the background engine attempts an automated session repair handshake without requiring user intervention.

🔬 Technical Cryptographic Specifications

Perfect Forward Secrecy (PFS): Every message and call signaling exchange uses a unique key derived from the Olm Double Ratchet engine.

Inside-Ratchet Identity Propagation: Profile changes (avatars, display names) are transmitted inside the Olm-encrypted ratchet, limiting network metadata collection.

Relay Metadata Minimization: Message and attachment payloads are opaque encrypted blobs. The relay retains only the routing and delivery records necessary for operation, with automatic TTL deletion.

⚖️ Regulatory & Legal Compliance

StateZerØ operates under strict data-minimization compliance standards:

• GDPR Art. 5 & Art. 11: Designed to minimize personal data to pseudonymous routing identifiers necessary for delivery, with automatic deletion policies.
• EU Digital Services Act (DSA Art. 4): Operates as an encrypted relay with minimized metadata (hosting provider classification).
• German TDDDG § 25: Exempt from consent banner requirements; contains zero analytics cookies, tracking scripts, or telemetry pixels.

Cookie Transparency Policy

Status: No Behavioral Tracking

StateZerØ is engineered for minimal data collection. I do not track user behavior, utilize Google Analytics, or deploy marketing pixels. While my code is cookie-free, I utilize Cloudflare for DDoS protection; you may occasionally see a strictly necessary security cookie used solely for bot protection. This is exempt from consent under § 25 para. 2 TDDDG.

Impressum

Inhalte gemäß §5 DDG

Individual Entrepreneur

c/o IP-Management #9966
Ludwig-Erhard-Straße 18
20459 Hamburg

Kontaktdaten:
E-Mail: statezer0@proton.me
Telefon: 00491749385199

Illegal Content (DSA):
E-Mail: legal.StateZer0@proton.me

Quelle: Impressum-Privatschutz