Privacy Policy

chatsizzle is built to be private by default. We don't require an account (one is optional, and asks for no email), and we don't sell your data.

When signed in, your push subscription also stores your account ID and streak reminder preference. This lets us send a streak reminder before chat hour instead of that evening's usual reminder. You can turn it off in Preferences. Signing out clears the link on this device; deleting the account clears it from all subscriptions. Points, badges and your chat streak are stored with your account until it is deleted.

If you enable friend invitation notifications, we store that preference with your push subscription and use its verified account link to notify you of invitations from mutual friends. These share the reminder cooldown and stop on inactive devices. Notifications contain no friend's name, account ID or chat content. Turn them off in Preferences.

Mutual friends may exchange up to 50 unexpired messages per thread, with 7 days, 1 day, or 24 hours after recipient opening. Unread messages last no more than 7 days. Visible messages in an active thread start opening timers, shared across the recipient's devices; previews and notifications do not. Read receipts and opening times are private. Removing or blocking a friend erases the active thread; account deletion erases its threads. Expiration removes text and cached translations. A reported message may be retained in the existing 30-day, bounded moderation store. Screenshots and recipient copies remain possible.

The same 50-message limit includes photos. Photos are resized and stored privately until their message expires. Hold to view starts a photo's opening timer; placeholders and previews do not. Expiration, removal or blocking deletes the saved photo. Reported photos may be kept in the limited moderation record for up to 30 days.

An account can save up to ten followed rooms and bounded room reading positions. Invite-room credentials stay private and access is checked before activity previews. Reply activity applies to Wall posts linked to your account; anonymous posting stays available. Drafts are saved on your device.

What we don't store

Live random chats and their photos live only in memory. Public wall notes, moderation reports, aggregate metrics, IP sanctions and optional push subscriptions can use durable storage as described below.
We don't ask for your email, phone number, or real name.

What we do process

A random session identifier (stored in your browser) so we can reconnect you to a chat if your connection drops.
Temporary, in-memory state (your chosen nickname and interests) that is discarded when you disconnect.
Messages and photos, briefly. A photo disappears from the chat on the sender's timer, or as soon as it is opened if it was sent as view-once. We keep the message text and the image itself in memory for up to 30 minutes afterwards, readable only by a moderator reviewing a report, and then erase them. If someone reports a chat, its images are kept for up to 24 hours so the report can be acted on. Nothing survives a restart.
What we cannot control. A photo you send is displayed on someone else's screen, so they can screenshot or save it before it expires. No website can prevent that. The timer is a courtesy, not a guarantee.
A profile picture, if you upload one. It is resized in your browser before it is sent, which also strips any location data the original photo carried. It is held in memory for a couple of hours and never written to disk.
Anything you choose to put on your profile: age, gender, and country. These are optional, shown to the person you are matched with, and never verified. Your country is read from your browser's language setting, not from your IP address or location, and we never go finer than country.
Basic technical logs and abuse signals (e.g. rate-limit and moderation events) used to keep the service safe.
If someone reports you, we record your IP address alongside that report so a moderator can act on it. A wall note keeps the IP it was posted from, in memory only, for as long as the note exists (see below). We never use IP addresses to work out where you are. Any block placed on an IP address always expires.
An email address, only if you enter the weekly giveaway. Entering is entirely optional and separate from chatting. We keep it only to contact that week's winner and to allow one entry per address per week; it is deleted once the prize is sent, or after about two weeks, whichever comes first. It is never used for anything else, and entering does not require you to give a name.

Message translation

In private chats and rooms, incoming messages in other languages are translated into your language, and the original always stays visible underneath. In Chrome and Edge this happens on your own device, and no message text leaves your browser. In other browsers, including Safari, Firefox and most phones, the message text is sent through our server to DeepL for translation, and nothing else is sent with it. You can switch incoming translation off in Preferences; the person you are talking to can still translate what you send them.

For a translation done through our server, DeepL receives the text of the message and the language to translate it into, and nothing else: no nickname, profile, session identifier or IP address. Our server keeps the message and its translation in memory for up to 10 minutes so a repeated request is not sent twice, then discards them. DeepL handles the text under its own privacy policy. If translation is unavailable, or its monthly allowance is used up, the original message is simply shown as it was written.

DeepL privacy policy

Public wall

Wall notes are public, have no name, and expire within 24 hours. Links are removed. Notes may be stored in Redis so they survive a restart. We keep the posting session and IP only in memory, for the lifetime of the note, to handle abuse; they are never shown publicly or included in the saved note. Reporting a note keeps its text in our bounded moderation report history, which can outlast the public note and survive a restart. The IP attached to a report remains memory-only. A like is remembered against your session, in memory only, so it counts once; how many likes a note has is never shown, it only orders the wall. Do not post personal information. Replies follow the same rules and disappear with the note they answer.

You can choose to post a note with your account instead. That note then shows your name and avatar, and anyone who taps it sees the profile a chat partner would see (whichever of your age, gender, orientation, country, language, bio and equipped collection items you filled in), as it was when you posted; never your interests, friend code or account ID. We store your account ID with that note, in Redis too, so readers can send you a friend request and so the note can be removed when you delete your account. It expires with the note, and deleting your account deletes the note and its replies.

Rooms

Rooms are public group conversations. Joining one shares your name, generated avatar, country, language, short bio, equipped profile styles and messages with everyone in that room; your age, gender, orientation, interests and photo avatar are never shown there. Rooms for an age or a gender use the age and gender on your profile to decide whether you can enter. With an account you can make up to two rooms; a room's name, description, topics, openers, welcome message, look, settings and your name as its maker are public, and are kept until you delete the room or your account, or until nobody has used it for 30 days. An invite-only room is listed only to its maker and to people holding its private link, and a friends-only room only to its maker's friends; a private link you open is kept in your browser so you can come back to that room. We keep each room's latest 80 messages for up to 30 days, saved so they survive a restart. In memory they carry internal session and account references and the sender's IP for moderation; the saved copy keeps the account reference only, never the session or the IP. Photos can be shared from an account only. Each person receives a copy marked with their own name, loaded only when they tap it, for up to 30 days, surviving a server restart. Replies refer to messages in the same room; emoji reactions and counts are visible to everyone who can see the message. Moderators can review and remove messages. Deleting an account removes its room messages. A reported message and its moderation references may remain in the report inbox for up to 30 days, and a reported photo for up to 24 hours; IP references remain in memory only. Other people can copy what you share. Older photos may expire sooner to make room for new uploads.

For timed room photos, each person's viewing period starts when they first open the photo. Account-linked viewing deadlines are saved with room history; guest deadlines stay only in memory. The timer does not shorten the photo's storage or moderation retention, and cannot prevent someone saving a copy.

People

People lists accounts that were on chatsizzle in the last 30 days: name, generated avatar, age and gender if they declared them, country, language, short bio, equipped styles and roughly when they were last here (rounded to five minutes). Interests are never shown. Turning off "Show me here", which is the same switch as Appear offline for friends, takes you off it. Readers can filter by the age, country and gender you declare. These details are not verified. We keep the 300 most recently seen accounts in this list for up to 30 days, saved so it survives a restart; deleting your account removes you.

Games

Games share the stake, choices revealed at settlement and results with your private-chat partner or the room. Private offers expire after one minute and results stay in memory for up to five minutes or until replaced. Room offers expire after two minutes; game lines stay in the room's history, its latest 80 messages for up to 30 days. Spent and won sparks are saved on your account. Analytics retain aggregate game counts only. Sparks have no cash value.

Gifts of sparks: when you give some of your sparks, the person receiving them sees your name and the amount; a gift in a room is shown to everyone in that room as a line, which follows the room's one-hour history. The amount moves between the two accounts' wallets. We keep how much each account has given in the last 24 hours in memory, to apply the daily limit, and only aggregate counts for analytics. Sparks have no cash value.

Accounts

An account is optional and asks for nothing: no email, no password, no name beyond the nickname you chat with. If you create one we store, in durable storage, the profile the join form already asked for (nickname, interests, and any age, gender, orientation, country, bio or avatar you chose), when it was created, when it was last used, a short public friend code, and a hash of your recovery key (never the key itself). Uploaded photos are not kept. No IP address, session or chat content is attached to it. If someone reports you while signed in, the report keeps your account id so a moderator can act on it. Deleting the account removes all of it at once; an account not signed into for a year is deleted automatically.

Friends store account links, requests, blocks and the last-used date. Your visible availability is shared only with friends. Appearing offline hides it. Mutual friends may exchange up to 50 unexpired messages per thread, with 7 days, 1 day, or 24 hours after recipient opening. Unread messages last no more than 7 days. Visible messages in an active thread start opening timers, shared across the recipient's devices; previews and notifications do not. Read receipts and opening times are private. Removing or blocking a friend erases the active thread; account deletion erases its threads. Expiration removes text and cached translations. A reported message may be retained in the existing 30-day, bounded moderation store. Screenshots and recipient copies remain possible.

If you have an account, your collection is stored with it: the items you own and have equipped, sparks spent, embers, free drops, Epic drops, the daily reward's day and date, the set and milestone rewards already given, and the counters that guarantee a Legendary. Drops are rolled by our server, and nothing in them can be bought. When you equip an item, the people you are matched with see your equipped items and your level; with nothing equipped they see neither.

If you answer the in-app survey, we count each answer and keep any comment you write, with its rating and the page's language, for up to 90 days. Answers are never stored with your session, account or IP address. If you are signed in, your account records only that you answered, so the survey is not shown again and its points are paid once.

Analytics

We use Cloudflare Web Analytics to count how many people visit and which pages they arrive on. It is the only third-party script on this site.

It sets no cookies, does not fingerprint your browser, and cannot follow you to other websites. It records the page you looked at, the site you arrived from, your browser and device type, your country, and how quickly the page loaded. Cloudflare processes your IP address to do this and does not retain it. There is no advertising network involved, and we sell nothing to anybody.

It is not tied to your chat. Nothing in the analytics identifies you, and nothing links a page view to a conversation, a session, or a report. If you block scripts, the site works exactly the same.

Notifications

If you tap “notify me” on the waiting screen and allow notifications, we can let you know when the site gets busy, even after you have closed the tab. This is entirely optional.

To do that, your browser gives us a push subscription: an anonymous address at your browser maker's notification service, plus the keys needed to send to it, the language you were using, so the notification arrives in a language you read, your time zone, so session times can display in your local time, and when you were last here, which exists only so we can stop sending: once that is more than a week ago we send one last notification and then nothing until you come back. It is a single date we overwrite, never a record of your visits. We keep the subscription in durable storage because it has to outlast your visit to be any use. It contains no IP address, no name, no session identifier, and nothing from your chats, and it is never linked to your conversations or to anything else you do here.

Chat Hour begin at 12:00 and 23:00 UTC daily and display in your timezone. Session reminders and generic friend-message notifications require separate opt-ins. Notifications do not open inbox messages or reveal message text, read receipts or hidden presence. Existing per-device cooldowns apply across triggers. A lapsed device receives fewer notifications, including at most one return reminder per absence if session reminders are enabled. Browser settings can revoke permission.

Your choices

Closing the tab ends your session and clears your in-memory data. Clearing your browser storage removes your session identifier. If you made an account, “Delete account” in your profile (the person icon in the top bar) removes it and everything in it at once.

Contact

Questions? Reach us via the details on our safety page.