ChatvLink What we collect, how we use it, and your choices.

Privacy Policy

What we collect, how we use it, and your choices. Compliant with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

1) What We Collect

  • Account info: email address, display name, age, gender. If you sign in with Google OAuth, we receive your Google email and name.
  • Country (approximate location): we work out your country from your IP address when you sign up and each time you log in, and store only the country (name and two-letter code), not your IP-derived city, coordinates or street address. We show it as a flag next to your name. If we detect that you are connected through a VPN or proxy, we do not let you sign up, log in or chat until it is turned off.
  • Profile details you choose to add: photo, description, city, and appearance details. You decide whether to fill these in.
  • Chat content: messages you send in registered chat rooms (stored for moderation and abuse prevention). Random chat / Talk to Strangers messages are not persisted — they exist only in real-time and are not stored on our servers.
  • Technical data: IP address, browser type, device info, access timestamps — used for security, rate limiting, abuse prevention, and service operation.
  • Reports & blocks: when you report another user or block someone, we store that action for enforcement purposes.
  • Payment data: if you make a donation, payment processing is handled by Stripe. We do not store your credit card number or payment details. Stripe processes and stores that data under their own privacy policy and PCI-DSS compliance.

2) Legal Basis for Processing

Under PIPEDA and BC PIPA, we collect and use your personal information only with your consent or for purposes that a reasonable person would consider appropriate. Specifically:

  • Consent: you provide consent when you create an account, sign up, or use the service.
  • Legitimate purposes: to prevent abuse, enforce our terms, maintain security, and operate the service.
  • Legal compliance: when required by law, court order, or to protect rights and safety.

3) How We Use Information

  • Provide, maintain, and improve the Service.
  • Prevent abuse, spam, fraud, and security incidents.
  • Moderate content to keep the community safe.
  • Communicate with you about your account (e.g., verification emails).
  • Process donations via Stripe.
  • Show your country flag and profile to other members (see "Who can see your information" below).
  • Detect VPN and proxy connections: we send your IP address to a third-party lookup service (ip-api.com) to find out whether it belongs to a VPN or proxy. The result is cached briefly in memory and is used to refuse sign-up, login and chat while a VPN or proxy is in use (you are asked to turn it off) and to avoid showing a country that is not yours. Detection is best-effort and can be wrong; if you believe you were affected by mistake, use the Contact page.

Voice calls

If both people agree, you can talk by voice. We do not record, store or listen to calls. Audio goes between the two devices, encrypted; when a relay server is used it passes the encrypted audio along and cannot read it. Your browser asks for permission before using the microphone, and you can refuse. When a call connects without a relay, the other person's device can learn your IP address; with a relay it cannot. We keep only what is needed to run a call (who asked whom, whether it was accepted or declined) in memory while the chat is open, not in our database.

Automatic message checks

Every chat message, including in anonymous random chat and Talk to Strangers, is checked by software as it is sent for prohibited language and for personal information such as phone numbers, email addresses and street addresses. Blocked messages are not delivered and are not stored. Random chat and Talk to Strangers messages that pass the check are passed on and not stored.

Who can see your information

Registered, logged-in members can see a directory of other members. For each member it shows display name, username, age, gender, country and flag, photo, description, city and appearance details if provided, when they were last online, and whether they are online now. Your email address is never shown to other members. People who are not logged in cannot browse registered members. Talk to Strangers shows your chosen display name, gender and country to others using that feature. Moderators and administrators can see account details for safety and enforcement.

4) Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers: hosting (VPS), PostgreSQL database, Redis, email delivery (Brevo), payment processing (Stripe), AI inference (Groq, Google Gemini, Mistral, OpenRouter and Nvidia, which receive the messages you send to roleplay characters; each message goes to just one of them), VPN/proxy detection (ip-api.com, which receives IP addresses), a human check when you sign up or log in (Cloudflare Turnstile), a relay for voice calls (our own server or Cloudflare), and, only if you allow ad cookies, advertising partners. All process data on our behalf.
  • Legal requirements: when required by law, court order, valid subpoena, or to protect rights, safety, and property.
  • Law enforcement: if we become aware of illegal activity, CSAM, or threats to safety, we will report to the appropriate authorities (e.g., Cybertip.ca, RCMP).

5) International Data Transfers

Some of our service providers (Stripe, Groq, Google, OpenRouter, Nvidia, ip-api.com, Cloudflare, and any advertising partner) are based in the United States, and others (such as Brevo and Mistral) in Europe. By using ChatvLink, you consent to your personal information being transferred to and processed in the US and other jurisdictions. These providers are contractually obligated to protect your data. Under PIPEDA, we remain accountable for data transferred to third parties.

6) Data Retention

  • Account data: retained until you delete your account.
  • Anonymous profiles (the username-only profiles made for Talk to Strangers): deleted as soon as you log out, when you are signed out for 15 minutes of inactivity, and automatically a few minutes after you leave without logging out.
  • Chat messages (registered users): deleted automatically after 90 days. Deleting your account does not by itself remove messages you already posted in a room; they are removed at the 90-day mark.
  • Random chat / Talk to Strangers messages: not stored. Messages exist only in real-time during the active session.
  • Reports: reports still awaiting review are kept until they are handled; once closed they are deleted after 1 year.
  • Technical logs: server access and error logs (which include IP address, browser type and the pages requested) are deleted automatically after 30 days.
  • Backups: we keep encrypted nightly backups of our database and uploaded files so the service can be restored after a failure. Backups are stored away from the main server and each one is deleted automatically after 30 days. Data you delete (including anonymous profiles deleted at logout) can therefore remain inside older backups until they expire, and it is not used for anything else.
  • Payment records: Stripe retains transaction records as required by law. We store only the transaction ID and amount for our records.

7) Your Rights Under Canadian Privacy Law

Under PIPEDA and BC PIPA, you have the right to:

To exercise any of these rights, use the Contact page or email us directly. We will respond within 30 days as required by PIPEDA.

Other privacy laws (EU/UK GDPR and California)

If you are in the European Economic Area, the United Kingdom or California, you also have these rights: to access your data, to have it deleted, to correct it, to receive a copy in a portable format (ask us through the Contact page), to object to or restrict some processing, and to complain to your local data protection authority. We do not sell personal information, and we do not use it for automated decisions that significantly affect you. Our automatic message checks only decide whether a message is delivered. To use any of these rights, use the Contact page; we reply within 30 days.

8) Account Deletion

You can delete your account at any time from your Profile page. This permanently removes your account and profile data, including your profile photos and avatar files. Anonymous (Talk to Strangers) profiles are removed the same way when you log out, including any photos. Messages you posted in chat rooms are not deleted immediately; they are removed automatically within 90 days of being sent. This action cannot be undone. Some anonymized or aggregated data may be retained for analytics purposes.

9) Cookies

We use essential cookies for authentication (session cookies). Advertising cookies from an ad partner are used only if you choose "Allow ad cookies" in the cookie banner, and you can change that choice at any time. We use Cloudflare Turnstile, a human check, when you sign up or log in; it runs invisibly and is covered by Cloudflare's Turnstile Privacy Addendum. See our Cookie Policy for full details.

Do Not Track, links and email

Do Not Track. We do not track you across other websites ourselves. Advertising cookies are loaded only if you choose “Allow ad cookies”, and, because we do not track you across other websites, we do not act on a browser’s Do Not Track signal. Links. ChatvLink may link to other websites; their privacy practices are theirs, so read their policies. Email. We send only messages you need, such as your sign-up verification, password and payment emails. We do not send marketing email. AI characters. Roleplay characters are AI, not real people.

10) Security

We use industry-standard security measures including HTTPS/TLS encryption, password hashing (bcrypt), rate limiting, CSRF protection, a human check against bots, automatic sign-out after 15 minutes of inactivity, and content moderation. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11) Children & Minors

ChatvLink is intended for users who are at least 18 years old. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately for deletion. If we become aware that a user is under 18, we will delete their account and associated data.

12) Breach Notification

In the event of a data breach that poses a real risk of significant harm to affected individuals, we will:

  • Notify affected individuals as soon as feasible, as required by PIPEDA s. 10.1.
  • Report the breach to the Office of the Privacy Commissioner of Canada.
  • Include details about the breach, the information involved, and steps individuals can take to protect themselves.

13) Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or a prominent notice on the site. Continued use after changes means acceptance. The "Last Updated" date at the bottom of this page will always reflect the most recent revision.

14) Contact

For privacy questions, to exercise your rights, or to file a complaint, use the Contact page.