What comes in
When you simply open the site
Like any website, ours receives technical details from your browser: what kind of device and system you use, the browser, device identifiers and mobile network details. Our servers log each request with its IP address and a timestamp, plus the response they sent. From an IP address we can tell roughly which region you are in; an exact location reaches us only if your device is set to share it.
When you start chatting
The moment you open the chat, a guest account is set up behind the scenes; calls and coins need an account to be attached to. Should you register properly, we hold on to the details you type in (email, username, display name, password) and anything optional you add, like a photo, a few lines about yourself, a birth date or a gender. Choosing Google or Apple sign-in passes us the name, email and picture from that account.
While you use it
Usage details, such as the parts of the site you open, the length of a visit and the page that sent you to us. We also store chat messages exchanged between users and whatever you write to support. Cookies and similar browser storage are part of this, as described in the cookie policy.
When you pay
For each purchase we keep the billing information and a transaction record. Card payments are processed by outside companies, and complete card numbers never sit on our servers.
Camera still frames used for safety
During matching and during calls, TinyChat.today can grab individual still images from your camera. The check runs in your browser first: it counts the faces in the frame, measures how bright the picture is, and reports those results to us along with the call or match they came from. When our settings call for it, the snapshot itself is sent to us too. This is switched on and tuned on our side, and there is no in-app setting to turn it off, which is why we spell it out here.
These snapshots exist only for safety: confirming that a real person is in front of the camera, and catching a camera aimed at things the person on the other end did not sign up for. They are never shown to the person you are talking to and never appear on your profile.
What we use it for
- Running the service: connecting calls, processing purchases, giving you the features you use.
- Making it fit you: match suggestions and the settings you chose.
- Talking to you: service notices, answers to your questions, support.
- Keeping people safe: spotting fraud, abuse and breaches of our terms or guidelines.
- Fixing and improving the site, based on how it is used.
- Meeting legal obligations and protecting users, the public and the service.
Who sees it
The person on your call sees your video, hears your voice and sees your profile name. As a guest, that name was generated for you. Anything you add to your profile later, like an avatar or bio, is visible to other users, and public profile pages may be picked up by search engines. Your email, phone number and password are never shown to other users; passwords are stored encrypted and nobody, staff included, can read them.
Beyond that, personal information leaves us only when:
- you ask us to share something;
- service providers need it to host the site, take payments, deliver content or run support, under confidentiality obligations;
- we are legally compelled, for instance by a court, a subpoena or a request from an authority, or sharing is truly needed to keep users, the public or the service safe;
- the service changes hands through a merger, sale or restructuring;
- it is turned into totals that cannot reasonably identify you.
Analytics: TinyChat.today counts visits with Google Analytics, but only for visitors who choose “Accept” in the cookie bar. If you say no, or never answer, nothing about your visit is sent to it. You can change your answer on the cookie policy page.
How long we keep it
We keep account data for as long as the account exists. Close it, and within a reasonable period your personal data is erased or stripped of anything that identifies you, apart from what a legal duty makes us hold. Things other people replied to or interacted with can stay behind, anonymised. Safety snapshots go as soon as nothing still depends on them, whether an investigation, a report under dispute or a legal hold. Some financial records outlive the account because tax and accounting rules say so.
What you can ask for
Depending on where you live, you may have the right to:
- get a copy of your personal data;
- have it corrected, or erased, with some legal exceptions;
- receive it in a machine-readable format;
- ask us to restrict how it is used in certain cases;
- opt out of promotional email, using the unsubscribe link or your notification settings.
Email [email protected] to make any of these requests. You will get an answer in a reasonable time, and within any deadline your local law sets.
Children, security and changes
TinyChat.today is for adults only. We do not knowingly keep data about anyone under 18 (or the local minimum age), and we erase it promptly when we find it. To flag an account like that, follow the child safety page.
Data is encrypted in transit and at rest, access is restricted, and security is checked regularly. Nothing online is perfectly secure, so use a strong password that you do not use anywhere else.
Meaningful edits to this policy update the review date at the top; for larger ones we give notice in advance, on the site or by email. Continuing to use TinyChat.today afterwards means you accept the new version.