What the server can and cannot see

It cannot see

• your audio, video or screen — every frame is encrypted on your device (SFrame, RFC 9605);
• the keys that encrypt them — they come from an MLS group (RFC 9420) only the people in the call belong to;
• in-call chat, which travels inside the same group.

It can see

• who joined and when — Kadalaas account ids, display names, and guests' chosen names;
• IP addresses;
• which audio and video streams exist and how many bits per second they use;
• who is speaking, from the loudness level your browser attaches to audio (it highlights the speaker);
• meeting codes, titles and schedules.

Checking for yourself

Everyone in a call sees the same verification code. Read it out: if anyone's code is different, you are not all in the same encrypted group, and someone could be listening. The code changes whenever someone joins or leaves. The people list is drawn from the encrypted group itself, so a member the server slipped in shows up there too.

Guests are marked unverified: their name is whatever they typed.