Privacy Policy

Last updated: June 2025

The short version

✓ We collect no personal data and require no account.
✓ Messages are relayed in real time and never stored.
✓ Your IP is held in server memory only while you're connected, then deleted.
✓ We use Cloudflare Web Analytics — cookieless, no personal data collected.
✓ We will never sell your data because we don't have any to sell.

1. Who we are

Chattyio ("we", "us", "our") operates the anonymous chat service at chattyio.com. For privacy inquiries contact us at privacy@chattyio.com.

2. What we collect — and don't collect

We are designed around collecting as little as possible.

Data type	Collected?	How long
IP address	In memory only	Until you disconnect
Display name, age, gender, country	In memory only	Until you disconnect
Chat messages	Never stored	Relayed & discarded instantly
Email address	Never collected	—
Tracking cookies	None set by us	—
Analytics / telemetry	None	—
IP hash (abuse reports only)	SHA-256 hash only	24 hours, then deleted

3. How your IP address is used

When you connect to Chattyio, your IP address is temporarily held in our server's RAM for three purposes:

Rate limiting — to prevent bots from flooding the service.
Block list enforcement — to prevent previously banned IPs from reconnecting.
Abuse reporting — if you are reported by another user, a SHA-256 hash of your IP (not the raw IP) is stored for up to 24 hours to enforce the ban. The raw IP is not retained after disconnection.

In cases of CSAM or serious criminal conduct, the raw IP may be disclosed to law enforcement upon valid legal request.

4. Cloudflare Turnstile

We use Cloudflare Turnstile for bot detection. Turnstile processes signals from your browser (including your IP address) on Cloudflare's infrastructure to determine whether you are human. Chattyio does not receive or store the raw data Cloudflare collects. Cloudflare may set a short-lived cookie as part of this process. Refer to Cloudflare's Privacy Policy for details on how they handle this data.

5. Analytics

We use Cloudflare Web Analytics to understand how visitors use the site. Cloudflare Web Analytics is cookieless and does not collect personal data or build user profiles. It measures aggregate metrics such as page views, top pages, referrers, countries, and Core Web Vitals. No IP addresses, device fingerprints, or cross-site identifiers are stored. Refer to Cloudflare's Privacy Policy for details.

6. Advertising

Chattyio displays advertising to fund the service. Advertising partners may use cookies or similar technologies to serve relevant ads. We will update this section with specific partner details as they are added. You can opt out of interest-based advertising through your browser settings or via aboutads.info.

7. Data sharing & disclosure

We do not sell, rent, or trade your data. The only circumstances under which we would disclose information are:

— To comply with a valid legal obligation, court order, or law enforcement request.
— To report CSAM to NCMEC as required by US federal law (18 U.S.C. § 2258A).
— To protect the safety of our users or the public in an emergency.

8. Children's privacy

Chattyio is not directed to individuals under 18 years of age. We do not knowingly collect any information from minors. If you believe a minor is using the service, please report it immediately using the in-app Report function or by emailing safety@chattyio.com.

9. Your rights

Because we collect no personal data linked to your identity, most data subject rights (access, erasure, portability) are satisfied by our zero-retention architecture — there is simply nothing to access or erase. If you have questions or concerns, contact privacy@chattyio.com.

10. Changes to this policy

We may update this policy from time to time. Material changes will be noted by updating the "Last updated" date at the top of this page. Continued use of the service after a change constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions: privacy@chattyio.com