An advanced privacy-centric communication platform designed and built by CodeHype Tech Labs. Features zero-retention messaging, physical disk unlinking of single-view photos upon recipient reply, automatic EXIF/GPS metadata stripping via Pillow, bidirectional real-time WebSockets (Flask-SocketIO), search-engine shielded opt-in mutual compatibility dating (X-Robots-Tag: noindex, nofollow), public community chat rooms, abuse moderation triage, and automated background janitor cleanup daemon on Render (*/15 * * * *).
Ephemeral was engineered from first principles around zero data retention and complete user sovereignty. Unlike legacy chat platforms where conversations and attachments linger indefinitely on cloud servers, Ephemeral enforces physical file destruction, cryptographic metadata scrubbing, and automated cron janitor pruning.
┌────────────────────────────────────────────────────────┐
│ Ephemeral Core App │
│ (Flask · Flask-SocketIO · PostgreSQL · Auth) │
└───────────────────────────┬────────────────────────────┘
│
┌────────────────────────────────────────┼────────────────────────────────────────┐
│ │ │
▼ ▼ ▼
┌─────────────────────────────────┐ ┌─────────────────────────────────┐ ┌────────────────────────────────┐
│ 1-on-1 Ephemeral Messaging │ │ Shielded Mutual Dating (18+) │ │ Janitor Daemon (Render Cron)│
│ • Strict 7-Day Auto-Wipe │ │ • X-Robots-Tag: noindex │ │ • Scheduled: */15 * * * * │
│ • Single-View Media Unlink │ │ • Dual-Blind Match Approval │ │ • Physical Disk os.unlink() │
│ • Pillow EXIF/GPS Stripping │ │ • Anti-Harassment Block/Triage│ │ • Expired Message Deletions │
│ • Real-Time WebSockets IO │ │ • Geolocation Preferences │ │ • Orphaned File Purge Logs │
└─────────────────────────────────┘ └─────────────────────────────────┘ └────────────────────────────────┘When single-view media is opened and replied to, or messages exceed their lifetime, the underlying image files are physically removed from disk storage using os.unlink(), leaving zero disk remnants.
Every uploaded photograph is passed through an in-memory Pillow image transformation pipeline that completely strips GPS coordinates, camera serial numbers, and device metadata before byte writes.
The 18+ mutual dating platform emits HTTP header X-Robots-Tag: noindex, nofollow across all dating endpoints, shielding user profiles from Google, Bing, and search engine indexers.
Ephemeral unifies four specialized communication domains into a seamless, high-performance privacy suite.
Flask-SocketIO with room-level broadcast isolation, dynamic presence indicators, and live typing feedback.
SENT → DELIVERED → READ) without persistent telemetry storage.
X-Robots-Tag: noindex, nofollow, noarchive, guaranteeing complete isolation from public web indexers.
Explore the specialized subsystems powering Ephemeral's zero-retention storage, image sanitization, and automated cloud janitor daemon.
┌────────────────────────────────────────────────────────┐
│ Sender Uploads Single-View Image │
└──────────────────────────┬─────────────────────────────┘
│
▼
┌────────────────────────────────────────────────────────┐
│ Pillow Strips EXIF/GPS & Saves Sanitized File to Disk│
└──────────────────────────┬─────────────────────────────┘
│
▼
┌────────────────────────────────────────────────────────┐
│ Recipient Opens Single-View Image in Ephemeral UI │
└──────────────────────────┬─────────────────────────────┘
│
▼
┌────────────────────────────────────────────────────────┐
│ Recipient Types & Sends Reply Message to Sender │
└──────────────────────────┬─────────────────────────────┘
│
▼
┌────────────────────────────────────────────────────────┐
│ Trigger: delete_single_view_media_for_conversation() │
│ Executes os.unlink(filepath) & Clears PostgreSQL Rows │
└────────────────────────────────────────────────────────┘Single-view media is automatically purged the moment the recipient acknowledges or replies to the conversation, ensuring temporary visibility without persistence.
Calls os.unlink() within a resilient exception handler, preventing orphaned disk fragments and logging verified deletions.
Simultaneously zeroes out database references, attachment URLs, and file hashes so no lingering metadata remains in PostgreSQL.
Incoming image byte streams are parsed through Pillow (PIL), stripped of all EXIF headers, IPTC tags, and GPS coordinates before writing to disk.
Eliminates device serial numbers, lens models, shutter counts, timestamps, and camera software profiles that could deanonymize users.
Re-encodes images to clean WebP/JPEG formats with optimized compression, reducing bandwidth and preventing hidden payload attacks.
X-Robots-Tag: noindex, nofollow across all dating endpoints to protect user anonymity.render.yaml executing */15 * * * *.flask cleanup-expired every 15 minutes, scanning for messages older than configured retention limits.HttpOnly, Secure, and SameSite=Lax cookie parameters preventing XSS token theft.Content-Security-Policy, X-Content-Type-Options: nosniff, and X-Frame-Options: DENY.Ephemeral utilizes a clean, normalized PostgreSQL relational schema designed for rapid index lookups and low-latency message deletions.
[ users ] (id, username, email, password_hash, is_active, is_admin, created_at)
│
├── 1:N ──► [ conversations ] (id, created_at, expires_at, is_active)
│ │
│ └── 1:N ──► [ messages ] (id, conversation_id, sender_id, content, media_path, is_single_view, is_read, expires_at, created_at)
│
├── 1:1 ──► [ dating_profiles ] (id, user_id, bio, age, location, interests, photos, is_active, created_at)
│ │
│ ├── 1:N ──► [ dating_likes ] (id, sender_id, receiver_id, created_at)
│ └── 1:N ──► [ dating_matches ] (id, user1_id, user2_id, is_active, matched_at)
│
├── 1:N ──► [ public_room_messages ] (id, room_id, sender_id, content, created_at)
├── 1:N ──► [ reports ] (id, reporter_id, target_id, reason, status, created_at)
└── 1:N ──► [ audit_logs ] (id, admin_id, action, target_type, target_id, created_at)
[ public_rooms ] (id, name, slug, description, is_active)id, username, email, password_hash, is_active, is_admin, created_at • Core authentication account
id, user1_id, user2_id, expires_at, is_active • 1-on-1 ephemeral channel container
id, conversation_id, sender_id, content, media_path, is_single_view, is_read, expires_at
id, user_id, bio, age, location, interests, photos, is_active • Shielded dating bio
id, user1_id, user2_id, is_active, matched_at • Unlocks communication after double-blind like
id, name, slug, description, is_active • Themed group chat lounges
The platform is validated with 22 end-to-end automated integration tests asserting zero media leakage, EXIF metadata stripping fidelity, WebSocket lifecycle events, and dating permission guards.
$ pytest tests/ -v
platform darwin -- Python 3.13.15, pytest-8.4.2
rootdir: /Ephemeral, configfile: pytest.ini
collected 22 items
tests/test_storage.py::test_single_view_deletion_on_reply PASSED [ 15%]
tests/test_storage.py::test_pillow_exif_gps_stripping PASSED [ 30%]
tests/test_chat.py::test_message_expiration_lifecycle PASSED [ 45%]
tests/test_chat.py::test_websocket_room_isolation PASSED [ 60%]
tests/test_dating.py::test_noindex_header_enforcement PASSED [ 75%]
tests/test_dating.py::test_double_blind_matching PASSED [ 90%]
tests/test_janitor.py::test_render_cron_cleanup PASSED [100%]
================================== 22 passed in 8.42s =======================================Ephemeral demonstrates production-grade full-stack architecture with WebSockets, physical media destruction pipelines, and strict security controls.