Leviathan is a terminal chat client with an optional crypto-trading bot. This page explains, plainly, what data exists when you use it, where it lives, and who can see it. It describes the software as it actually works today, not as a general statement about privacy.
1.What we don't collect
The Leviathan project does not run any analytics, telemetry, or tracking. The client and the bot code we publish do not phone home to us. We have no account system of our own, no email address, no phone number, and nothing resembling KYC.
2.What the client stores on your machine
- Login credentials. If you set a local username and password, they're stored in a plain-text file (
users.db) in your config directory, asusername:password_hash. This file never leaves your machine and we never see it. - Message logs, only if you turn them on. Logging is off by default. If you enable it, the client writes plain-text logs of your conversations to a local folder you configure. Nobody but you (and anything else running on your machine) has access to those files.
- Your configuration file (server addresses, nickname, room list) — stored locally, never transmitted anywhere except to the chat servers you tell it to connect to.
3.What leaves your machine, and to whom
| Destination | What it receives | Why |
|---|---|---|
| The chat server(s) you configure | Your IP address, nickname, and the plain-text content of every message and command you send in that session | This is how client-server chat works. The operator of that server can read and log your messages the same way any chat server operator can. |
| CoinGecko API | An HTTPS request for current prices, made by the machine running the OsirisBot server component — not by your client | To show BTC/ETH/XMR/USDT prices. Using the trading bot does not expose your IP to CoinGecko. |
There is no other outbound traffic. The client does not call any analytics endpoint, crash reporter, or update-check server.
4.Encryption, precisely
When a server block in your config has tls: true, the connection between your client and that chat server is encrypted with TLS. That protects your traffic from anyone listening on the network between you and the server.
5.The trading bot's data
OsirisBot keeps a ledger of nicknames, simulated wallet balances, and trade listings on the server side, in a local data file the bot maintains. It does not collect real names, payment details, or any identity document — a "wallet" here is a bot-tracked balance tied to your chat nickname, not a real cryptocurrency wallet with private keys.
Anyone running their own instance of the bot on their own server controls that data file; it is not sent to us.
6.Plugins
If you install a third-party plugin, it runs as native code inside the same process as the client, with the same level of access to your files and memory as the client itself. Whatever that plugin does with your data is between you and whoever wrote it — we cannot see or control plugin behavior. Only install plugins from sources you trust.
7.Your options
- Leave logging off (the default) if you don't want a local record of conversations.
- Connect only to servers whose operators you trust, since they can see your message content.
- Delete
~/.config/leviathan/to remove your local config, credentials, and logs entirely.
8.Changes to this policy
If the software changes in a way that changes what data it handles — for example, if end-to-end encryption or Tor support is added — this page will be updated to match, and the "last updated" date above will change.
9.Contact
Questions about this policy can be opened as an issue on the project's repository.