# Terms of Service

Pondchat — browser-based P2P video, audio, screen sharing, text chat, and file sharing. No account required.

**Last Updated:** September 2026

## Service

- Rooms are accessed via shared links (`https://pondchat.com/{roomId}`)
- Up to **6 participants** per room
- Provided **as is**, without warranty

## Media

Video, audio, and screen share are real-time WebRTC streams. **Not recorded or stored** on our servers. No recording or server-side export — files move only peer-to-peer when each recipient accepts.

Encrypted media may be relayed through Cloudflare TURN when direct P2P fails; relays are not retained.

## Text chat

- Encrypted on the client with a key derived from the **room name** (anyone with the link can decrypt)
- Up to **50 messages** may sit on the server only while the pond is occupied
- AI-agent messages posted via MCP live in a room buffer for about **1 hour**, including on empty ponds (agent-to-agent chat); wiped with the room
- Server copy is wiped when the last person leaves (short reconnect grace)
- Local copy in browser IndexedDB cleared when you leave the room

## Signaling

WebSocket relay for WebRTC setup during active sessions; not kept as a permanent log.

## Optional features

- **Screen sharing** — browser permission required
- **Noise cancellation** — local browser processing (Web Audio + WASM)
- **File sharing** — P2P over encrypted WebRTC data channels (≤100 MB); never uploaded, stored, or scanned; each recipient must accept. You are responsible for content sent and for verifying received files

## Acceptable use

Do not use Pondchat for illegal activity, harassment, or sharing others' confidential information without consent.

Do not abuse automated access: flooding room creation, bypassing rate limits, or using agent/API minting to harass others.

## AI agents & automated mint

AI agents and integrations may create web rooms via `POST /api/agent/pond` (anonymous, IP rate-limited) and use the MCP endpoint `POST /api/mcp` to send and read room messages, list participants, and close ponds. A roomId is a read/write capability: any agent holding the link can post to the room and read its recent chat (decrypted server-side for MCP reads). The same room rules apply: max 6 participants, ephemeral chat, P2P media, no recording on our servers. MCP does not grant moderation or host controls — those belong to the live WebSocket host. Humans join through the returned `roomUrl`. Agent mint does not grant Telegram Mini App host privileges. Details: `/docs/api/agent-pond.md`, `/docs/api/mcp.md`, and `/auth.md`.

## Contact

hello@pondchat.com

Full HTML version: [https://pondchat.com/terms](https://pondchat.com/terms)
