Privacy Policy

1. What we collect

• Guests: nothing that identifies you. We create a random session and a generated nickname for each room.
• Accounts: your email address, a password (stored only as a one-way hash), a nickname, and your language and privacy preferences.
• Content you create: messages in rooms and private dialogs, rooms and templates you create, saved chats, friends and invites, and reports you file.
• Technical data: IP address, browser and device type and session information, used to keep the service secure and working and to limit abuse. We also keep a list of your signed-in devices so you can sign them out, and the notification subscription of your browser if you turn push notifications on.
• Payments: your balance, plan and payment history, payment identifiers, amounts, blockchain transaction identifiers and the deposit addresses we generated for you. We never receive card numbers or the keys to your wallet.

2. How we use it

• To provide the chat: rooms, private dialogs, friends, notifications and your account.
• To keep the service safe: rate limits, word filters and moderation of reported content.
• To process payments, balance top-ups and plan renewals.
• To send service emails: confirmation of your address and notifications you enable.
• To fix problems and improve the service.

We do not sell your data and we do not show advertising.

3. Anonymity in rooms

In rooms you appear only under a generated pseudonym. Other participants never see your email address. If you add someone as a friend, they see your account nickname.

Messages you post in a room are visible to everyone in that room and can be copied by them, so do not share anything you want to keep private.

4. Who we share data with

We share data only when it is needed to run the service or required by law:

• Service providers that host and deliver Ghostroom, including network, content delivery and security providers, an email delivery provider and a payment processing service. They process data on our behalf and only for these purposes.
• Moderators and administrators, who can read messages that are reported to them.
• Authorities, when we are legally required to, and to protect users and the service from abuse.

5. Payments and blockchains

Payments are made in cryptocurrency. Transactions are recorded on public blockchains, which we do not control and cannot erase. Funds added to your balance are credit for use in the service and are not refundable or withdrawable.

6. How long we keep data

• Messages stay while the room exists. Deleted rooms are permanently removed after 30 days.
• Saved chats stay until you delete them.
• Sign-in sessions last up to 7 days and renew while you use the service.
• Email confirmation links are valid for 24 hours. Exported chat files are removed after 1 hour.
• Server logs are kept for a limited time for security and troubleshooting.
• Balance and payment records are kept as long as needed for accounting, disputes and legal obligations.

7. Cookies and similar storage

We use small cookies and your browser storage only to make the service work: your language and theme and your sign-in session. We do not use advertising or tracking cookies and no third-party analytics.

8. Security

Connections are encrypted in transit, passwords are hashed and access to data is restricted. No system is perfectly secure, so keep your password private and use a unique one.

9. Your choices and rights

• In the app you can change your nickname, language and privacy settings, sign out other devices and turn notifications on or off.
• You can ask us to give you a copy of your data, correct it, or delete it together with your account.
• If you are in the European Economic Area or the United Kingdom you may also object to or restrict processing, ask for data portability and complain to your data protection authority.

10. Children

Ghostroom is not intended for people under 16. If you believe a child has given us personal data, contact us and we will remove it.

11. International transfers

Our providers may process data in different countries. Where required, we rely on appropriate safeguards.

12. Changes to this policy

We may update this policy. The date above shows the latest version; for significant changes we will notify you in the service.