🆕 Software Suggestion | Whereby #1892
Labels
No Label
🔍🤖 Search Engines
approved
dependencies
duplicate
feedback wanted
high priority
I2P
iOS
low priority
OS
Self-contained networks
Social media
stale
streaming
todo
Tor
WIP
wontfix
XMPP
[m]
₿ cryptocurrency
ℹ️ help wanted
↔️ file sharing
⚙️ web extensions
✨ enhancement
❌ software removal
💬 discussion
🤖 Android
🐛 bug
💢 conflicting
📝 correction
🆘 critical
📧 email
🔒 file encryption
📁 file storage
🦊 Firefox
💻 hardware
🌐 hosting
🏠 housekeeping
🔐 password managers
🧰 productivity tools
🔎 research required
🌐 Social News Aggregators
🆕 software suggestion
👥 team chat
🔒 VPN
🌐 website issue
🚫 Windows
👁️ browsers
🖊️ digital notebooks
🗄️ DNS
🗨️ instant messaging (im)
🇦🇶 translations
No Milestone
No Assignees
1 Participants
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: privacyguides/privacytools.io#1892
Loading…
Reference in New Issue
No description provided.
Delete Branch "%!s(<nil>)"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Basic Information
Name: Whereby
Category: Video/Voice Calling
URL: https://whereby.com/
Description
GDPR compliant service. All plans include the "Small" room size (up to 4 participants) in which communication between participants are primarily sent through peer-to-peer connections.
Data Storage & Security FAQ.
Why I am making the suggestion
It seems to be an interesting service for the privacy-focused community and I would like to know what other people in the community think about it.
My connection with the software
None.
WhereBy is pretty nice
For up to 4 participants all traffic is routed in a p2p way, meaning no server ever sees it.
Our company has the paid version, which also works really well, however for rooms of more than 4 people their servers are used to route/prioritize/bundle traffic.
But all the free rooms are 4 people only, so it should be privacy-friendly for all free users.
how does this peer to peer work, is it some form of webrtc?
From their Data Storage & Security FAQ:
Me and @LukeSeers have been working together to uncover the secrets of whereby.com on how they handle their data. This is a small sample of what we have uncovered from our detective work.
This may be a good service for some, however if you are truly interested in privacy, you would read the privacy policy, having done this you will note that the service is not fully compliant with the GDPR, it does not even mention CalOPPA which is a matter of law and should be there as a protection for users all round the world, they collect PII and do not ask for consents on their consent page, and just to add insult to injury they have servers in the USA where the government has regular access to data through the NSA, collecting PII and sharing it without consent is totally against any form of privacy.
They do not have a “Do-Not-Track” policy, as per calOPPA.
We have chosen a couple of quotes from the privacy policy to demonstrate what we want to get across:
Even though this states this at the beginning of the privacy policy more you read the more it starts to fall apart. Which as a result already breaks the trust of privacy users?
After looking through their consents page at (https://whereby.com/user/privacy) It doesn't specify data in anyway shape or form, it generalises the whole subject of consent. We only could find that one page, if you find another page that has all the consents, we would love to see it.
If they don’t store information, why do they state “after downloading it form Whereby”.
Also it appears to be closed-source, so it's likely a less preferable alternative compared to the open-sourced and unlimited Jitsi Meet (already listed) and Kopano Meet (PR #1980). Note that Kopano Meet uses a fully peer-to-peer model, but with unlimited number of participants (although it's likely not possible to reach a huge number of participants, but certainly much more than 4 is possible).