Logging policy
Transparent by default: what we log, what we never log.
| Item | Logged? | Notes |
|---|---|---|
| Video/audio content | Never | E2EE call content is not logged or stored. |
| Encryption keys | Never | Keys stay on devices; do not log key material. |
| Chat plaintext (with E2EE) | Never | Server relays ciphertext envelopes only. |
| SDP / ICE candidates | Avoid | Operational debugging only; do not keep at info level. |
| Call start/stop timestamps | Sometimes | Used for limits/billing/abuse protection (no content). |
// Example: safe logging (no content)
logger.info("call_ended", { callId, userId, durationSec });