Privacy Policy

Last updated: April 12, 2026

ChatFlirt ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Data We Collect

Category	Data Collected	Purpose
Account	Email address, name, avatar emoji, country, language, bio	User identity and profile display
Conversation history	Duration, date, and partner info for completed chats	Encounter history feature
Technical	IP address, browser type, device type	Security, fraud prevention, service improvement
Moderation	Reports submitted (reason, reporter, reported user)	Safety and moderation enforcement
WebRTC (real-time)	ICE candidates, SDP offers/answers (signaling metadata)	Establishing peer-to-peer video connections

What we do NOT collect: We do not record, store, or process your video or audio streams. Video chat is peer-to-peer; your streams never pass through our servers. Text chat messages are relayed in real time and are not stored.

2. How We Use Your Data

To provide and improve the ChatFlirt service
To authenticate you and maintain your session
To display your profile to matched partners during chats
To show your conversation history
To enforce our Terms of Service and handle user reports
To detect and prevent fraud or abuse
To send transactional emails (account-related only)

3. Data Sharing

We do not sell your personal data to third parties.

We may share data with:

Service providers — Hosting infrastructure (Render, Neon PostgreSQL) that process data on our behalf under data processing agreements
Law enforcement — When required by applicable law, court order, or to protect the safety of our users

Your profile (name, avatar, country) is shared with your matched video chat partner during a session. This is necessary for the core functionality of the service.

4. Data Retention

Account data — Retained as long as your account is active. Deleted within 30 days of account deletion request.
Encounter history — Retained for 12 months, then automatically deleted.
Moderation reports — Retained for 24 months to support safety investigations.
Technical logs — Retained for 30 days.

5. Cookies and Local Storage

We use a single session cookie (token) to keep you logged in. This cookie is:

HttpOnly — not accessible by JavaScript
Secure — only transmitted over HTTPS
Valid for 30 days

We use localStorage to store an anonymous visitor ID for analytics purposes. This ID is not linked to your account.

6. Your Rights

Depending on your location, you may have the following rights:

Access — Request a copy of the data we hold about you
Correction — Update your profile directly in the app at /profile
Deletion — Request deletion of your account and associated data
Portability — Request your data in a machine-readable format
Objection — Object to certain types of data processing

To exercise these rights, contact us at privacy@chatflirt.polsia.app.

7. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), and HttpOnly cookies. No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

8. Children's Privacy

ChatFlirt is not intended for users under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we discover that we have collected data from a minor, we will delete it immediately.

9. International Transfers

Your data is stored on servers located in the European Union and the United States. By using ChatFlirt, you consent to the transfer of your data to these locations.

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance.

11. Contact

For privacy questions or data requests, contact us at privacy@chatflirt.polsia.app.