Privacy Policy

Account information. Your email address, which we use to sign you in with a one-time code. ChatToday doesn't use passwords. You can also sign in with Google, Facebook, or Apple. In that case, we only collect your email address and an identifier for your account with them, so we can recognize you on future sign-ins. We don't collect anything else from that account, such as your name, photo, contacts, or friend list.

Profile information. Anything you choose to add to your profile: photos, bio, interests, and any social or messaging accounts you link.

Activity information. Messages you send through our built-in chat, profile views, bumps, and other actions you take in the app.

Location information. Your device's approximate location, derived from your network connection. See "Location information" below for more detail.

Device and usage information. Technical details like your IP address, browser type, and general usage patterns, which we use to keep the Service secure and working properly.

Diagnostics information. If the app crashes or hits an error, we automatically receive a crash or error report, via Sentry, containing technical details like device type, OS version, and app state, so we can find and fix the problem. Our servers also generate technical logs (via Grafana Labs) to monitor performance and diagnose errors.

We use the information above to:

• Operate the Service: show your profile to other members, deliver your messages, run search and the grid
• Send you sign-in codes and other emails necessary to run your account
• Review photos and profile text for content that violates our guidelines, before it's shown to others
• Detect and prevent fraud, spam, and abuse, including banning accounts that violate our Terms
• Understand how the Service is used so we can maintain and improve it

We don't use your information to serve you third-party advertising, and we don't sell your information.

Photos and profile text are automatically screened before they're shown to other members, using automated image- and text-analysis tools. This lets most content go live within moments, while content that doesn't meet our guidelines, like nudity or content involving minors, is rejected automatically. Flagged content may also be reviewed by our moderation team.

We also use Cloudflare's CSAM Scanning Tool to check every image served against hash lists of known child sexual abuse material (CSAM) maintained by organizations like the National Center for Missing & Exploited Children (NCMEC). Any match is blocked from further delivery and reported to NCMEC, as required by law.

We use your device's network connection to work out an approximate location (accurate to roughly a neighborhood, not an exact address), not GPS, and not anything more precise than that. This powers the "Nearby" badge and distance-based search filters.

Anyone viewing your profile, member or not, only ever sees a general "Nearby" indicator or approximate distance, never your exact coordinates or address. We only store your most recent known location, not a history of where you've been.

Publicly. Profiles are open to browse — your profile photos, bio, and interests are visible to anyone who visits ChatToday, whether or not they've created an account.

With other members. Some things are only visible to other signed-in members, not the general public: your online status, that you viewed someone's profile, and any field you've restricted to members only from your privacy settings, like your linked social accounts.

With our team. Authorized ChatToday staff can access account information, including signing in as you temporarily, solely to investigate a support request or a safety/moderation issue. Every instance is logged.

With service providers. We work with a small number of vendors to run the Service: Cloudflare (cloud hosting, content delivery, storage, CSAM detection, and bot/spam protection via Turnstile), Resend (transactional email for sign-in codes), Sightengine (automated content moderation), Sentry (crash and error reporting), Grafana Labs (server log and performance monitoring), and Google Analytics (usage analytics on our website). They only receive the information needed to do that job, and aren't permitted to use it for anything else.

With sign-in providers. If you choose to sign in with Google, Facebook, or Apple, we send them the request needed to authenticate you and receive back the account information described in "Information we collect" above. We use it only to create and access your ChatToday account, not for any other purpose.

With Klipy (GIFs). When you search for or view a GIF in chat, that request goes directly from your device to Klipy, our GIF provider, not through ChatToday's servers. Klipy receives your IP address and search terms in the process. We only ever store the GIF's ID and image URL, not your search history.

For legal reasons. We may disclose information if required by law, or if we believe it's necessary to protect the safety of our members or the public.

We don't sell your personal information to third parties.

Across borders. Your information may be processed on servers outside your country, including in the United States, through our hosting provider's global network. Wherever it's processed, we apply the same protections described in this policy.

From the Privacy tab in Settings, you can control:

• Who can see the social accounts linked to your profile: everyone, or members only
• Incognito mode, available to Premium members, so profiles you visit won't see that it was you

Your online status is visible to other members whenever you're active, based on when you last used ChatToday. There's currently no setting to hide it.

You can also block or report another member at any time from their profile or your conversation with them.

We keep your information for as long as your account is active, so the Service keeps working the way you'd expect. You can delete your account at any time from Settings → Account.

You're signed out immediately and your profile disappears right away, but we keep your account for 7 days before permanently deleting it, sign back in during that window to cancel. Once that window passes, we remove your profile and personal information, other than what we're required to keep for legal, security, or fraud-prevention purposes.

Some records, like moderation strikes and safety-related logs, may be retained after your account is deleted so we can prevent repeat abuse and meet our legal obligations.

We use a session cookie to keep you signed in. That's essential to how the Service works and can't be turned off while staying signed in.

Our website (not the mobile app) also uses Google Analytics, which sets its own third-party cookies to help us understand how visitors use the site, for example which pages are popular. We use it for usage analytics only, not advertising, and we don't share this data with Google for ad personalization. You can opt out using your browser's cookie settings or the Google Analytics Opt-out Browser Add-on. If we start using cookies for advertising, we'll update this policy.