Privacy Policy

Last updated: 1 January 2025

1. Data We Collect

Account data: email address, display name, date of birth (not stored — age only verified at consent).
Usage data: session timestamps, match events, reports submitted or received.
Payment data: processed by Stripe; we only store subscription status, not card details.
IP addresses: retained for up to 30 days for abuse prevention.

2. Video & Audio

Video and audio are transmitted via WebRTC directly between browsers. Our servers act only as signaling relays and never receive, record, or store media streams.

3. How We Use Your Data

To operate the matching service and authenticate your sessions.
To process subscription payments via Stripe.
To investigate reports and enforce our community guidelines.
To send transactional emails (ban notifications, appeal decisions).

4. Data Sharing

We do not sell your personal data. We share data only with:

Stripe — for payment processing.
Supabase — our database and authentication provider (EU region).
Law enforcement, when legally required.

5. Data Retention

Account data is retained while your account is active and for 90 days after deletion (to resolve outstanding reports). Chat session logs (timestamps only, no content) are retained for 30 days.

6. Your Rights (GDPR)

EU residents have the right to access, correct, export, or delete their personal data. Submit requests via our contact page.

7. Cookies

We use session cookies for authentication only. We do not use tracking or advertising cookies.

8. Contact

Privacy questions: contact us or email dpo@worldmeeting.chat.