Privacy policy

Who we are

tempchat.cool is run by SolidFlux B.V., a company in the Netherlands. SolidFlux B.V., Oudekerksplein 9, 1012 GX Amsterdam, the Netherlands (Chamber of Commerce no. 85049832, VAT NL863488031B01), is the controller for the little personal data described here.

What we store

• For each room: the room address, when it was created, when it ends, how long it was set to last, whether it has a password, and a hash of an access token. We do not store the key or the password.
• Encrypted messages and the encrypted room name, until the room ends. We cannot read them.
• Technical details of each message: a connection number, the time received and the padded size.
• Encrypted photos, until the room ends, with their padded size and upload time. We cannot open them.
• If you report a room: the message text you choose to share, and the email address if you give one, for up to 6 months.
• If you report a photo from inside a room and choose to send it: the key for that one photo, so we can look at it while the room exists. The photo itself is still deleted when the room ends.
• If you have a Plus account: a keyed hash of your email address (not the address itself), your Stripe customer and subscription ids, your plan and until when it is paid, and hashes of your login links and sessions. We do not keep which rooms you make.
• If you pay for a room (an event pass or an extension): which room it was for and the Stripe payment reference, so the room gets what was paid for and we can refund. Stripe holds the payment details; we never see your card.

What we do not store

• Your messages in readable form, the room key, passwords, or nicknames.
• IP addresses in our logs. Request logging is switched off.
• Accounts, phone numbers or email addresses of room members.

Cookies and analytics

Room pages use no cookies and no third-party scripts. Your browser stores a few small settings locally (your nickname, a device id, and for rooms you made a code that lets you delete them) so the site can remember you; they never leave your device. No page on the site uses analytics scripts or trackers. The only cookie is the login cookie for Plus accounts: it is set when you log in, is only sent to our account API (never to room pages or room connections), and lasts 90 days or until you log out. We only keep anonymous daily counts, such as rooms made, rooms where someone joined, the number of messages, room size, the chosen lifetime and language, the country a room was made or joined from, reports and removals. The country comes from Cloudflare's lookup of the connection; we keep only the country code in a daily count, never the IP address. They hold no room addresses, no content and no link to people.

Who processes data for us

Cloudflare, Inc. hosts the service and delivers traffic. Rooms and photos are stored in its EU jurisdiction. Cloudflare processes IP addresses to deliver pages and to protect the service. Cloudflare also sends our login emails: it gets your address for that one email. Stripe Payments Europe, Ltd. processes payments for paid extras: it receives your payment details and the room address, never the room key or messages. Stripe keeps payment records as the law requires.

How long we keep things

• Rooms, messages and photos: until the room ends (1 to 36 hours after the first person joins, longer if extended, or 7 days if nobody joins), or earlier if deleted.
• Reports: up to 6 months.
• Plus accounts: until you delete the account. Login links: 15 minutes. Sessions: 90 days.
• Payment records: kept by Stripe and in our books for 7 years, as Dutch tax law requires. They say which room a payment was for, not what was in it.

Your rights

Under the GDPR you can ask what we hold about you, ask us to correct or delete it, and complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Because we cannot tell who is who in a room, we may need the room address to find anything. Write to privacy@tempchat.cool.

Age

tempchat.cool is for people aged 16 and older.