Privacy Policy

This policy describes what Matchachat ("we") collects, why, and what we do with it. It is written to match how the service actually works.

What we collect

• Account details. A username you choose, your gender, and either a hashed password (we never store the password itself) or, if you use Google, your Google account identifier and email address.
• Report evidence. If another user reports you during a chat, we capture a single still frame of your video at that moment, along with the reason selected and both account identifiers.
• Moderation records. Any suspensions applied to your account, and any appeal you submit.
• Technical data. Standard connection information such as your IP address, which is inherently visible to our servers and to the networking services described below.

What we do not store

• Your video and audio are not recorded. Calls are peer-to-peer between browsers; our servers relay only the information needed to establish the connection. The single exception is the still frame captured when someone reports you.
• Text chat is not saved. Messages are passed to your partner in memory and never written to our database. They disappear when the chat ends.
• Your real name and profile photo are never shown. If you sign in with Google, we replace the stored name with your chosen username and do not expose the provider's name or avatar.

Who we share it with

We do not sell your data. We use these providers to run the service:

• Railway — application hosting and database.
• Cloudflare R2 — storage for report screenshots, in a private bucket that is not publicly accessible.
• Metered — relay servers that help connect calls when a direct connection is not possible.
• Google — only if you choose to sign in with Google.

Cookies

We use a single cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

Retention

Account details are kept while your account exists. Report screenshots and moderation records are kept for [TODO: retention period] so that appeals can be reviewed fairly and repeat behaviour identified.

Your rights

You can request a copy of your data or ask us to delete your account by contacting [TODO: contact email]. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. [TODO: confirm which regimes apply with a lawyer.]

Children

Matchachat is strictly for adults aged 18 or over. We do not knowingly collect information from anyone under 18. If you believe a minor is using the service, please report them in-app so we can act.

Contact

[TODO: legal entity name, registered address, contact email]