Encounter Resolution Pipeline · server-authoritative · privacy-by-design
Server-authoritative pipeline · p95 < 200ms end-to-end
Co-presence window · concentric zone model · zone label only persisted
Retention · purge · erasure cascade · privacy invariants enforced by construction
Privacy invariants — enforced by construction
(a) No persistent raw-GPS history retained server-side beyond 30-minute resolution window.
(b) Inter-user disclosure limited to fuzzy zone descriptor + jittered centroid — no precise coordinates to peers.
(c) All proximity computation server-side — clients cannot query peer locations under any RLS policy.
(d) Signal volume bounded by 432 Rule — 4 signals / 3 recipients / 2 hours — prevents bulk solicitation.
(e) User erasure cascades through pings → encounters → signals → matches → messages → media — reflected <1s via realtime.