How Long Do Chat Messages Really Last?
"Deleted" means at least four different things depending on the platform. What actually happens to a message after it disappears from your screen, and how to find out for any given site.
When a message vanishes from your screen, one of about four things has happened. They have very different consequences, and almost no platform tells you which one applies to it.
This matters more than most privacy questions people worry about, because retention is the thing that turns a conversation into a record. An IP address is a number nobody looks at. A three-year archive of everything you said is a different sort of object.
The four meanings of "deleted"
Hidden from you. The message is gone from your view and still in the database. Common with "delete for me" features and with moderation removals. From the platform's perspective nothing was deleted at all.
Soft-deleted. Flagged as deleted, excluded from queries, still stored. This is the default for most systems, because it's the easiest to build and it's reversible if someone complains. A soft-deleted message survives indefinitely and is fully readable by anyone with database access.
Hard-deleted. The row is actually removed. Rarer than you'd think, because it's more work and because operators are usually reluctant to destroy something they might need for a moderation dispute later.
Expired. Deleted on a timer regardless of what anyone does, by a scheduled job. This is the only version that's a policy rather than an action — it happens whether or not you remember, whether or not you're still using the site.
And running underneath all four: backups. A platform can hard-delete a message and still hold it in a nightly snapshot for weeks. This is not sinister, it's how databases are operated responsibly, but it means "deleted immediately" and "gone from all systems immediately" are rarely the same claim.
What "ephemeral" usually means in practice
Ephemeral messaging is a strong marketing word attached to a wide range of realities.
At the honest end, messages expire on a fixed clock, the expiry is enforced by something that runs whether anyone is watching or not, and it applies to media as well as text.
At the weak end, messages disappear from the interface while remaining fully intact server-side — which is a display convention, not a privacy property.
The tell is whether the platform describes a mechanism or an outcome. "Messages disappear after 24 hours" is an outcome and could mean anything. "A scheduled job deletes messages older than 24 hours, including uploaded media" is a mechanism, and mechanisms can be wrong but they can't be vague.
The part no retention policy covers
Whatever the platform does, the person you were talking to can screenshot.
This is the ceiling on every guarantee in this post, and it's worth being blunt about it because ephemerality creates a false sense of consequence-free conversation. Deletion protects you against the platform being breached, against a subpoena three years from now, against someone reading your history later, and against your own past accumulating into a profile. It does not protect you against the recipient.
That distinction is the whole thing. Ephemeral messaging is protection against systems, not against people.
How to find out for any platform
Look for a number. A retention policy that survives contact with reality has a duration in it. Vague language — "we don't keep your messages longer than necessary" — is not a policy, it's a sentence.
Check whether media is included. Text and uploads are frequently handled by completely different systems, and it's common for messages to expire while images sit on a CDN indefinitely. If a policy mentions messages and says nothing about photos, assume the photos are permanent.
Test it, if you can. Post something, note the URL of any attachment, come back after the stated window, and see whether it's still there. This takes two minutes and tells you more than any policy page.
Check the privacy policy's retention section specifically. Not the marketing copy. If there's no retention section at all, that's the answer.
Assume indefinite by default. Storage is cheap and deletion is work that nobody schedules unless they've decided it matters. The default state of any system is that it keeps everything.
What we do, for disclosure
On chatlobby, messages are deleted within 24 hours by a scheduled job, and that includes uploaded media — images and video expire on the same clock, enforced by a reaper process on the file service rather than by anything in the interface. Profiles are ephemeral too: close the tab and yours is gone within minutes.
The honest caveats, since this post is about reading claims sceptically: reports are snapshotted separately and deliberately outlive the message, because a moderation record that expires with the evidence is useless. And nothing here protects you from someone screenshotting, which is true everywhere and always will be.
We wrote about why we think conversations should disappear separately — this post is the mechanical version of that argument.
The practical upshot
If you're deciding how much to say somewhere, the useful question isn't "is this private" — it's "how long does this exist, and who can reach it in a year".
For most platforms the honest answer is: forever, and anyone with database access. That's not a reason to avoid them. It's a reason to know which kind of place you're typing into, because the same sentence has very different weight in a room that forgets and a room that doesn't.
What your IP address actually reveals covers the privacy question people usually ask instead of this one — and this one matters considerably more.