Privacy Policy

1. Introduction

Welcome to ChittyChattyChat. We are committed to protecting your privacy and ensuring you have a safe, anonymous chatting experience. This Privacy Policy explains how we collect, use, and protect your information when you use our anonymous 1-on-1 chat service.

ChittyChattyChat is designed with privacy as a core principle. We minimize data collection and implement strong encryption to protect your conversations.

2. Information We Collect

2.1 Information You Provide

• Display Names: Optional usernames you choose for chat sessions (not linked to your real identity)
• Chat Messages: Text and files you send during chat sessions (encrypted and automatically deleted after 24 hours)
• Room Codes: Temporary 4-character room identifiers (automatically generated)

2.2 Automatically Collected Information

• Device Fingerprint: A unique identifier for your browser/device session (used for room access control only)
• IP Address: Your internet connection's IP address (used for security and audit purposes only)
• Connection Metadata: Timestamps and connection status (not linked to message content)
• Technical Data: Browser type, device type, and operating system (for service optimization)

2.3 Information We Do NOT Collect

• Real names or personal identification
• Email addresses or phone numbers
• Payment information (service is free)
• Location data beyond IP address
• Social media profiles or accounts

3. How We Use Your Information

We use the collected information solely for the following purposes:

• Service Delivery: To provide, maintain, and improve the chat service
• Security: To prevent abuse, spam, and unauthorized access
• Room Management: To enforce the 2-participant limit and 24-hour expiration
• Technical Support: To troubleshoot issues and improve performance
• Legal Compliance: To comply with applicable laws and respond to legal requests

4. Data Security and Encryption

We implement strong security measures to protect your privacy:

• End-to-End Encryption: All messages are encrypted using AES-256-GCM encryption
• Secure Transport: All connections use HTTPS/TLS encryption
• Temporary Storage: Data is automatically deleted after 24 hours
• Device Binding: Rooms are locked to specific devices to prevent unauthorized access
• No Permanent Records: We do not maintain long-term archives of your conversations

5. Data Retention and Deletion

• Chat Messages: Automatically deleted 24 hours after room creation
• Room Data: Archived and encrypted after 24 hours, then permanently deleted within 30 days
• Session Data: Cleared when you close your browser or session expires
• Device Fingerprints: Removed when room expires

You can manually destroy a chat room at any time, which immediately deletes all associated data.

6. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties, except in the following circumstances:

• Legal Requirements: When required by law, court order, or government request
• Safety and Security: To prevent fraud, abuse, or harm to users or the service
• Service Providers: With trusted third-party services that help us operate the platform (under strict confidentiality agreements)

We do not use your chat content for advertising, marketing, or any purpose other than providing the service.

7. Cookies and Tracking

We use minimal cookies and local storage for essential functionality:

• Session Cookies: To maintain your connection and room access
• Device ID: Stored locally to enable room re-entry after page refresh
• Theme Preference: To remember your light/dark mode choice

We do not use tracking cookies for advertising or analytics beyond basic service metrics.

8. Third-Party Services

Our service may include:

• Google AdSense: For displaying advertisements (subject to Google's privacy policy)
• CDN Services: For delivering JavaScript libraries (Socket.IO, Crypto-JS)

These third parties have their own privacy policies and may collect data according to their terms.

9. Your Rights and Choices

You have the following rights regarding your data:

• Anonymity: You can use the service without providing any personal information
• Data Deletion: Manually destroy chat rooms to immediately delete all data
• Access Control: Only you and your chat partner can access your room (device-locked)
• Opt-Out: Simply don't use the service if you disagree with these terms

10. Children's Privacy

ChittyChattyChat is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

11. International Users

Our service is hosted in the United States. If you access the service from outside the U.S., your data may be transferred to and processed in the United States. By using the service, you consent to this transfer.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us through our support channels.