OG

Private group video

Calls that never leave the room.

High-quality video for up to 8 people. No accounts, no history, no cloud storage — media flows directly between devices, encrypted the whole way.

Start an OG call

Check your camera, pick a name, and enter the room.

Shared only with people in your call. Never stored on a server.

····-····
Encrypted path Connecting… 1

How privacy works in OG

Your call travels device-to-device

Video and audio move over WebRTC, directly between the people in the room (a “peer-to-peer mesh”). Every media packet is encrypted with SRTP, the standard WebRTC transport encryption, before it leaves your device.

What the connection broker sees

To find each other, devices register a random room ID with a small public signaling server (the PeerJS broker). It sees connection metadata — room IDs and IP addresses — so it can introduce peers. It never receives camera or microphone content, and OG sends it no names and no account data, because there are no accounts.

Hard networks may use a relay

Some firewalls block direct connections. When that happens, a public TURN relay forwards your packets so the call still works. The relay only ever handles already-encrypted SRTP packets — it cannot watch or listen to your call, but like any internet hop it can see IP addresses and traffic volume.

What OG stores

For your calls: nothing on any server. No call history, no recordings, no logs of who talked to whom. Your display name is kept in this device’s session storage so you don’t retype it — it is deleted when the browser session ends.

If you turn on the optional group ring, one small server (a Cloudflare Worker we run) stores a push address for each device that opted in and a hashed version of the group passphrase, and it can see when someone rings the group — plus IPs, like any server. It never touches your calls: media stays device-to-device.

Honest limits

  • Anyone in the call can screenshot or record their own screen. No app can prevent that.
  • The room code is the only key. Share it like a password — anyone holding it can join while the host is present.
  • The broker and relay are public infrastructure: they can observe that a connection happened (IPs, timing), just not its content.

Group ring

Turn this on and OG can ring your devices when someone in your group starts a call — a notification, not a FaceTime-style call screen. Everyone in the group enables it with the same group passphrase, on each device they want rung.

Acts like a password for the ring list — everyone in the group types the same one.

Honest limits

  • This is a notification-style ring — not Apple’s native call screen.
  • iPhone: needs iOS 16.4+, and OG must be added to the Home Screen (Share → Add to Home Screen) and opened from there before enabling.
  • The ring server stores a push address per opted-in device and a hashed group passphrase, and sees when rings happen. Your calls stay device-to-device — the ring server never touches them.
  • Devices that are off, offline, or denied notifications can’t be rung.