Introduction
RandomChat ("we", "us", or "our") operates the website random-chat.me. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using RandomChat, you agree to the practices described in this policy.
Information We Collect
We collect minimal information needed to provide the service:
- Account data (optional): If you register, we collect your username, Gmail address, and a hashed password. We do not store plain-text passwords.
- Gender preference: Stored locally in your browser (localStorage) to improve matching. Not linked to your identity.
- Age verification: A simple boolean flag stored in localStorage confirming you are 18+. No date of birth is collected.
- Chat content: Text, voice, and video chat data is transmitted peer-to-peer or relayed via our server in real time. We do not record, store, or log chat sessions.
- Technical data: IP address, browser type, and connection metadata are processed transiently for security (rate limiting) and are not retained.
Cookies & Local Storage
We use the following technologies:
- HttpOnly JWT cookie: Set after login for authentication. Expires when you log out or the session ends. This cookie is essential for the service and cannot be disabled while logged in.
- localStorage: Used to store your gender preference, chat mode, age verification flag, and username. This data stays in your browser only.
- Google Analytics cookies: We use Google Analytics (GA4) to understand aggregate usage patterns. This may set cookies such as
_gaand_gid. You can opt out via Google's opt-out tool.
Analytics
We use Google Analytics 4 (measurement ID: G-Z9X0P970RK) to collect anonymous, aggregated usage data such as page views, session duration, and general geographic region. We have disabled Google Signals (allow_google_signals: false) to limit cross-site tracking. No personally identifiable information is sent to Google Analytics.
Third-Party Services
We integrate with the following third parties:
- Google Analytics — Usage analytics. Privacy Policy
- Google Fonts — Loads the Outfit typeface. Privacy FAQ
- Cloudflare CDN — Delivers Font Awesome icons and Anime.js. Privacy Policy
- Telegram Bot — If you use the @RandomChatXOBot, Telegram's privacy policy governs that interaction.
- MongoDB Atlas — Stores registered account data (encrypted at rest). Located in the EU/US as configured by deployment.
How We Use Your Information
- To authenticate you and maintain your session
- To match you with a random stranger for chat
- To prevent abuse (rate limiting by IP)
- To send OTP verification emails via Nodemailer
- To improve our service through aggregate analytics
We do not sell, rent, or trade your personal data with third parties for marketing purposes.
Data Security
We implement industry-standard security measures:
- Passwords are hashed using bcryptjs before storage
- Authentication tokens are stored in HttpOnly cookies (not accessible to JavaScript)
- All traffic is served over HTTPS with enforced redirects
- Security headers (CSP, HSTS, XSS-protection) via Helmet.js
- Rate limiting on authentication endpoints to prevent brute force attacks
Children's Privacy
RandomChat is strictly for users aged 18 and over. We do not knowingly collect data from minors. If you are under 18, please do not use this service. If we discover that a minor has created an account, we will delete it immediately.
Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Withdraw consent to cookie-based tracking at any time
To exercise any of these rights, contact us via the Telegram bot: @RandomChatXOBot.
Contact Us
For privacy questions or data requests, contact us at:
Telegram: @RandomChatXOBot