TRANSPARENT DATA GOVERNANCE
Open Chat Privacy Policy
Our privacy model is simple: we minimize data collection to the absolute technical minimum required to operate a safe, reliable, and legally compliant real-time chat platform.
What We Never Collect
- Zero Personal Identifiers: We do not ask for, accept, or store your email address, legal name, phone number, or physical address.
- Zero Passwords or Credentials: Authentication relies on server-minted anonymous session tokens.
- Zero Cross-Site Tracking: We do not load Google Analytics, Meta Pixels, or third-party behavioral profiling scripts.
- Zero Social Graph Mining: We do not scrape contact books, device fingerprints, or location telemetry.
What We Store & Why (Forensic Safety)
To defend against illegal exploitation, spam bots, and abusive attacks, the server maintains immutable security audit records:
- Session Credentials: An encrypted session identifier stored in an
HttpOnly, SameSite=Laxcookie. - Client IP Address: Recorded strictly on socket connections and audit events to enable rate limiting and abuse mitigation. Normal operators cannot view raw IPs without elevated SECURITY privileges.
- Messages & Attachments: Messages and sanitized attachments are persisted in PostgreSQL to enable room conversation continuity and audit compliance.
Cookie Policy
Open Chat uses only strictly necessary functional cookies (openchat_session) to maintain your anonymous connection state. We do not use third-party advertising cookies or cross-domain tracking pixels.