Privacy Policy

Last Updated: October 5, 2026

This Privacy Policy explains how RandomChat ("we", "us", or "our") handles information when you visit randomchat.pro, create an account, use video or text chat, or contact us. It applies to registered users and guests. For questions or privacy requests, contact contact@randomchat.pro.

Please also read our Terms of Use and Cookie Policy. RandomChat is intended only for adults aged 18 and over.

1. Information we collect

Account information

If you register with email, we store your email address, user name, a protected password hash, registration date, verification status, and account identifiers. We do not store your password as plain text. We also process sign-in sessions and temporary verification, password-reset, and security tokens.

We may associate the gender category you select (male, female, or couple) and your approximate country with your account. Country is estimated from your IP address and may be inaccurate, particularly when a VPN or shared network is used.

Google sign-in

If you choose Continue with Google, Google provides information used to identify your account, including your Google account identifier, email address, email-verification status, and name. We use this information to create or sign you in to your RandomChat account. We do not receive your Google password, and ordinary Google sign-in does not request access to your Gmail messages, Google Drive files, contacts, or Search Console data. We do not store a Google profile picture as part of your account.

Guest, connection, and device information

You can use guest chat without registering. Guest use is not anonymous to our infrastructure: we process IP addresses, temporary connection identifiers, selected gender and matching preferences, approximate country, connection times, and technical information needed to establish and secure a chat. Security and operational logs may also contain request, browser, or device information.

Our moderation system derives a network identifier from an IP address using a hash. This helps group reports and enforce network bans. A hashed identifier is not the same as fully anonymous data. People sharing a network may share the same identifier.

Video, audio, messages, and reports

With your browser permission, your camera and, where enabled, microphone supply live media to your chat partner. Text messages pass through our server so they can be delivered. Our current application does not routinely record complete video or audio conversations or save a persistent chat-message history on the server. Specific still images may be collected for moderation as explained below.

We store report and ban records, including session references, timestamps, account or network identifiers, moderation reasons, status, and administrator actions. We also record usage information such as connection counts, waiting and conversation durations, daily gender-category visits, and totals for different gender pairings. These statistics do not require storing conversation content.

Messages to support

When you use our contact form or email us, we receive your name, email address, subject, message, and any information you choose to include. Please avoid sending passwords or unnecessary sensitive information.

2. How we use information

Provide video and text chat, match participants, and apply selected preferences.
Create and manage accounts, verify email addresses, authenticate sign-ins, and reset passwords.
Send requested account emails and respond to support or privacy requests.
Detect abuse, process reports, enforce restrictions, and review moderation decisions.
Understand service usage and improve reliability and connection performance.
Protect the service, investigate incidents, and meet applicable legal obligations.

Where data protection law requires a legal basis, we rely on the basis appropriate to the activity: providing the service you request, our legitimate interests in security and operating the service, compliance with legal obligations, or consent where required. Browser camera permission controls technical access to your camera; it does not waive your privacy rights.

3. Live connections and what your partner can see

Your partner can see and hear the media you share and read messages you send. Your selected gender category and approximate country may also be shown. We do not display your account email address to your chat partner as part of the normal chat interface.

Video and audio use WebRTC. Connections may be direct between participants or pass through a relay server when necessary. Direct connections can expose network information, including a public IP address, to the other participant's device. Connection-support services such as STUN and TURN process network information to establish or relay connections.

Although the site prohibits inappropriate recording or redistribution, we cannot prevent another participant from capturing what you share. Avoid showing identity documents, financial information, addresses, or other information you do not want another person to possess.

4. Moderation, screenshots, and automated restrictions

RandomChat uses reporting tools, automated checks, and administrator review. Administrators can view account and live-connection information and moderation evidence. This does not mean that every conversation is watched or recorded.

When a report is confirmed, the reporting browser may temporarily capture a still frame of the reported participant. The server requests an evidence upload when the reporting threshold triggers an automatic ban, rather than keeping a server-side image for every report. The current threshold is three distinct reporting network identifiers within 24 hours, which can result in a 24-hour restriction.

The browser also checks for unchanged camera frames during a connected chat. A detected period of approximately 30 seconds of identical frames can trigger a 24-hour restriction and an evidence screenshot. This is a frame-comparison check, not facial recognition or identity verification. Technical conditions can affect detection, and automated checks can make mistakes.

Evidence images are available only through restricted administrator access. An image remains pending for manual review even if a temporary restriction has expired. When an administrator decides to release or permanently ban the person through the review controls, the associated image is deleted from active evidence storage. Report, ban, and decision records may remain. Backup copies may persist until their backup cycle expires.

You can request review of a restriction by contacting contact@randomchat.pro. Include enough information to locate the incident, such as the approximate time and your account email if registered. Network bans may affect other people using the same connection.

5. Cookies and browser storage

We use account-session and Google sign-in security cookies. We also store saved camera, microphone, and mirror preferences in your browser. Our Cookie Policy lists their names, purposes, and durations and explains how to clear them. The current site does not include advertising pixels or third-party audience analytics scripts.

6. Service providers and other disclosures

We use providers to operate the service, including Hetzner for hosting and infrastructure, Zoho for email, and Google for optional sign-in. Our pages load fonts from Google Fonts, which means your browser sends Google technical request information, including your IP address, when requesting those resources. Google or other configured connection services may also process network information for WebRTC connectivity.

Providers process information needed for their role and may apply their own privacy policies. Relevant information is available in the privacy policies of Hetzner, Zoho, and Google.

We do not sell personal information or use Google user data for advertising. We may disclose information when required by law or where legally permitted and necessary to address fraud, abuse, threats to safety, or legal claims. If the service changes ownership, relevant information may be transferred subject to applicable law and appropriate notice.

7. Google data and the administrator Search Console connection

Google sign-in information is used for account access and related support and security. We do not use it to build advertising profiles or train general-purpose AI models. Access by personnel is limited to necessary support, security, operational, and legal purposes.

Separately, an authorized site administrator can connect Google Search Console to manage RandomChat's own website. That connection requests Search Console permission to identify an authorized site property, submit its sitemap, and retrieve page-indexing status. We store an authorization token and the relevant property, submission, and indexing results in restricted server storage. This feature is for site administration and does not request access to ordinary visitors' Search Console properties.

Our use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements. You can revoke a Google connection through your Google Account connections. Revoking access does not by itself delete information already stored in your RandomChat account; use the deletion option or contact us for that request.

8. How long information is kept

Accounts: account information remains while your account exists, unless removed through account deletion or another applicable process. Unverified registrations can also remain until removed.
Access tokens and sessions: account sessions are valid for up to 30 days, email-verification links for 24 hours, password-reset links for 30 minutes, and sign-in state for 10 minutes. Expiration prevents further use; expired records are cleaned up during relevant account operations.
Conversation content: live media and text are processed for delivery without a routine persistent conversation archive. The moderation-image exception is described above.
Moderation evidence: pending screenshots remain until a review decision or applicable deletion. Expiry of a ban alone does not delete its evidence.
Reports, restrictions, usage records, and audit records: these currently have no fixed automatic deletion schedule. We retain them for operation, security, review, and statistical purposes, subject to applicable deletion rights and legal requirements.
Support correspondence: messages remain in our support mailbox as needed to address inquiries and keep relevant correspondence; there is currently no fixed automatic deletion schedule.
Backups: database backups rotate on an approximately 14-day schedule. Separate infrastructure backups may retain earlier copies according to their backup cycle. Deleting active data does not immediately erase all backup copies.
Administrator Google authorization: stored authorization remains until removed or replaced; revocation at Google prevents its continued use. Indexing records remain for site administration.

9. Your choices and privacy rights

You can use guest chat, change matching preferences, manage camera and microphone permissions in your browser, clear cookies and saved settings, and stop using the service. Camera access is required to participate in video chat. Turning off permissions may limit the features we can provide.

To delete a registered account, sign in, open Your account, choose Delete account, and confirm. This removes the active account, associated sign-in sessions and tokens, and account-linked records handled by the deletion process. Aggregate statistics, network-based security records that are not linked to that account, support correspondence, and backup copies may remain as described in this policy. Deleting a RandomChat account does not delete your Google account.

Depending on where you live and the law that applies, you may have rights to access or correct personal information, request deletion or a portable copy, restrict or object to certain processing, withdraw consent, and complain to a data protection authority. Contact contact@randomchat.pro to make a request. We may need to verify your identity and the scope of the request. Some guest records cannot reliably be linked to a particular person, especially on shared networks. We respond within the time required by applicable law.

10. Security and international processing

We use HTTPS, protected password hashes, restricted administrator access, and server-side access controls. These measures reduce risk but cannot guarantee that a service, device, or communication is completely secure.

Information may be processed outside your country through our hosting, email, Google, and other infrastructure providers. Where applicable law requires safeguards for an international transfer, those requirements apply to the transfer. Contact us for information about the arrangements relevant to your request.

11. Adults only

RandomChat is not intended for anyone under 18. We do not knowingly offer accounts or chat access to minors. If you believe a minor has supplied personal information or is using the service, contact us so we can investigate and take appropriate action, including restriction or deletion where applicable.

12. Changes and contact

We may update this policy as the service changes. The date above identifies the latest revision. We will provide additional notice or obtain consent for changes when applicable law requires it.

For privacy questions, requests, or concerns, email contact@randomchat.pro or use our contact form.