Call relay now uses Cloudflare TURN
When a 1:1 call cannot connect peer-to-peer, encrypted packets can relay through Cloudflare. Cloudflare cannot decrypt the call.
Most 1:1 calls still connect device to device. Some networks (strict NAT, firewalls, some mobile carriers) block that path. When that happens, Buzzio can use a TURN relay so the call still connects.
The relay is now Cloudflare Realtime TURN (pay-as-you-go). It is a connectivity helper, not a recording service.
What Cloudflare can and cannot see
- Cannot decrypt call audio, video, or screen share (DTLS/SRTP).
- Can see typical relay metadata: IP addresses, ports, and session timing.
If a call stays peer-to-peer, that relay is not used.
Why we are saying this here
Privacy-facing infrastructure changes belong on the updates site, not only in technical docs. The same note is on Subprocessors and Encrypted calls.