Privacy notice

What we collect

• A temporary anonymous session (random identifier, your age confirmation and rules acceptance timestamps, optional interests and languages). It expires within about 24 hours.
• Optional profile details: a chat name, your country and your gender. The country field is pre-filled on your device from its timezone or language settings (never from your IP, and nothing leaves your browser during detection) and you can change or clear it before saving. Chat name and country are shown to people you match with; gender is used only for matching and never displayed. Server copies expire with the temporary session; a form-prefill copy is saved only in this browser for 30 days and can be removed from the preference screen.
• A salted hash of your IP address and coarse device signals — used only for rate limiting and abuse prevention. We do not store your raw IP alongside your activity.
• Match metadata (who matched with whom, when, and how the conversation ended) kept briefly to power blocking, rematch exclusion and moderation.
• Reports you submit, including the category and any description you provide.
• Aggregated, privacy-conscious product analytics (for example “a match was made”), never message contents.

What we do not collect

• No names, emails, phone numbers or accounts.
• No video or audio recordings — ever, by default.
• No message history: text is relayed transiently and not stored, outside narrowly scoped, documented moderation processing.
• No advertising identifiers inside conversations.

How long things are kept

• Anonymous sessions: about 24 hours.
• Recent-match exclusions: about 24 hours.
• Match metadata: about 72 hours.
• Blocks: about 30 days.
• Remembered form preferences in this browser: 30 days, or until you choose Forget saved details.
• Rate-limit counters: up to 7 days.
• Reports and related safety records: as long as moderation and legal obligations require.

Who can access data

A small number of authorised safety staff can access report metadata and safety events, with every access audited. Moderators cannot browse live conversations.

Advertising on public pages

When advertising is enabled, Google AdSense may process device information, IP addresses, ad interactions and cookie or local-storage identifiers on public information and discovery pages. Advertising code is excluded from queue, live conversation and post-conversation screens.

Visitors in regions where consent is required are shown consent choices through a Google-certified consent platform. Those choices can be revisited using the privacy controls provided on the site.

Your choices and contact

Sessions expire on their own, and closing your browser tab discards session and conversation state. Remembered form preferences remain locally for up to 30 days unless you clear them. For privacy questions or concerns, contact support@sayhallo.fun.

This notice describes the current MVP behaviour and will be updated as the product evolves.