Privacy Policy

2. General Information & Territorial Scope

Protecting your personal data is an absolute priority for us. We treat your data strictly confidentially and in full compliance with the statutory European General Data Protection Regulation (GDPR), ePrivacy Directive, and Digital Services Act (DSA). Our services and checkout are available to users residing within 32 European states (27 EU Member States, EFTA countries: Switzerland, Norway, Iceland, Liechtenstein, and the United Kingdom).

3. Collection of Personal Data & Media

We collect personal data and user-generated content strictly required to deliver real-time communication and digital license activation:

• Account credentials: Username, email address, hashed password (bcrypt).
• Profile attributes: Age (18+), gender, country (from 32 supported European states), and city.
• Messaging content: Stored chat messages, timestamps, and read states.
• Uploaded media: Photos and videos shared within private conversations (stored on secured servers).
• WooCommerce Order & Billing Data: Name, email, country, city, and transaction status for Product ID #4042 (12 EUR / year). Full credit card numbers are processed directly by certified payment processors and never stored on our server.
• Technical logs & Cookies: IP address, device headers, session ID, and referral invite verification cookies (30-click counter).

4. Purpose of Data Processing

Data processing is carried out strictly for the following purposes:

• Providing private text, media messaging, and WebRTC video calling.
• Authenticating user accounts, processing WooCommerce orders (Product #4042), and managing referral VIP access.
• Preventing automated spam bots, click manipulation, fraud, and cyber attacks.
• Enforcing user blockings and safety moderation.

5. Legal Grounds & Special Category Data

Processing is lawful based on the following legal foundations:

• Art. 6 (1) (b) GDPR: Performance of contract (providing messenger service and digital order processing).
• Art. 6 (1) (f) GDPR: Legitimate interest (bot defense, anti-fraud, security).
• Art. 9 (2) (a) GDPR (Explicit Consent): By voluntarily sharing intimate text or adult media, you explicitly consent to the technical processing of special category data relating to your private/sexual life.

6. Data Encryption & Confidentiality

We maintain high security standards while being completely transparent about technology:

• Encryption in Transit: All web traffic, checkout data, messages, and file transfers are encrypted using TLS 1.3 / HTTPS.
• WebRTC Video Calls: Direct live video calls are encrypted peer-to-peer (DTLS-SRTP) between browser endpoints. Calls are never recorded or stored on our servers.
• Storage on Server: Messages and uploaded media are stored on secure server databases to preserve conversation history. The service is not an End-to-End (E2E) encrypted vault. Stored media is access-controlled via authentication scripts.

7. Digital Services Act (DSA) & Content Moderation

In accordance with the EU Digital Services Act (DSA):

• We do not engage in general, automated surveillance of private conversations.
• However, we reserve the right to review reported content and permanently remove illegal material (e.g. child sexual abuse material, non-consensual pornography, threats, fraud).
• Users can block unwanted accounts at any time. Blocked messages are flagged and muted.

8. Data Retention Period

Personal data, messages, and uploaded media are retained only for as long as your community user account is active. Upon account deletion, all associated messages and media are irrevocably purged within 30 days. Accounting and invoice records are preserved as mandated by statutory tax laws.

9. Your Rights under GDPR

You have full statutory rights regarding your personal data:

To exercise any of these rights, contact us at: info@public-chat.online.