This Privacy Policy explains what ChatAnony (chatanony.fun) collects about you, why, how long we keep it, who we share it with and what you can do about it. It is written for people in India first, and it follows the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (as amended in 2026) and the Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules, which are being brought into force in phases. It also applies to visitors from every other country.

The short version. You can chat without an account, an email address, a phone number or your real name. We do not sell your data. We keep a limited amount of technical and safety data (such as your IP address, a random device ID and moderation records) to run the service, stop abuse and meet legal duties. Chat messages are not kept for long, and random chat messages are not stored at all.

1. Who we are and how this service runs

ChatAnony is an online platform (an “intermediary” under Section 2(1)(w) of the IT Act, 2000) that connects adults for anonymous conversations and games. It is run by the ChatAnony team. For the DPDP Act, we are the “Data Fiduciary” for the personal data described below.

ChatAnony is operated together with FunChat (funchat.in) and runs on the same chat service. The chat, safety and account systems are hosted there, so the data described in this policy is processed on that shared service, and the FunChat Privacy Policy applies to it as well. If the two ever differ, the one that protects you more applies.

2. What we collect

What you give us

  • A display name. A random one is made for you. It does not have to be real, and phone numbers are not allowed as names.
  • Gender and age confirmation. You tell us your gender (used for matching and profile cards) and confirm that you are 18 or older. We do not ask for proof of age at this stage.
  • Interests (optional), to match you with someone similar.
  • Chat content. Messages, images, GIFs, voice notes and drawings you send are relayed to the people you are talking to.
  • Optional account details. If you sign in for VIP, we store your email address and a one-way hash of your password (never the password itself).
  • VIP and payment records. If you buy VIP: the plan, amount, payment reference (UTR), your username, your email and, if you upload one, a payment screenshot. We never see or store your card details, UPI PIN or bank login.
  • Reports and messages to us. What you write in a report, a support email or an appeal, and the details you include.

What we collect automatically

  • IP address and connection data. Used to enforce bans, block abuse and bots, spot VPN/proxy misuse, show an approximate country, and keep the server logs the law requires. Not used for advertising and not sold.
  • A random device ID stored in a cookie, so we can recognise the same browser across visits. It is used to prevent ban evasion, protect a name you were recently using and let VIP follow you. It holds no personal information.
  • Browser storage. Your gender, display name, theme, a short-lived “human check passed” flag and a sign-in token are kept in your browser’s local or session storage on your own device.
  • Safety records. Reports made about you or by you, automated filter and review results, and ban records (username, IP, device, reason, duration).

What we never collect

  • Your real name or phone number for ordinary chatting. We actively block phone numbers in chat.
  • Your GPS or precise location. We only derive an approximate country from your IP address.
  • A browser or canvas fingerprint built from your hardware.
  • Your browsing history outside ChatAnony.
  • Your card number, UPI PIN or bank login.

3. Why we use it (our purposes)

  • To match you with other people and run chat, calls and games.
  • To keep the platform safe: age confirmation, abuse prevention, filters, reports, bans and cooperation with the authorities.
  • To run VIP: activate it, send receipts and expiry reminders, and answer payment queries.
  • To comply with the law, including the record-keeping and reporting duties of an intermediary in India.
  • To understand usage and keep the service free through ads.

We use your personal data only for these purposes, and only on the basis of your consent (given when you tick the 18+ box and start chatting) or for the legitimate uses the DPDP Act allows, such as complying with the law and responding to a medical or safety emergency. We do not use your chat content for advertising.

4. Cookies, ads and analytics

  • Strictly necessary. The device-ID cookie, session storage and Cloudflare cookies for bot protection and the Turnstile human check. These cannot be switched off while using the site.
  • Analytics. Google Analytics and Tag Manager give us aggregate statistics about site use. They do not read your chats.
  • Advertising. The home page shows one third-party advertisement, delivered by an ad network (the ad is loaded from profitableratecpmnetwork.com). The network may set cookies or use similar technology to show and measure that ad, under its own policy. Chats and the chat pages show no ads. You can block cookies in your browser, and you can report an ad to us.

Blocking cookies resets your device ID and may stop the human check from working.

5. Who we share it with

We do not sell your personal data. We share it only as follows.

  • Service providers who work for us, and the advertising network behind the single home-page ad: Cloudflare (hosting delivery, security, Turnstile, call relay), our email delivery provider (sign-in codes, receipts, replies), an AI provider such as Google Gemini (automated review of reported messages; it is not used to build an advertising profile), Giphy (GIF search queries) and Google Fonts.
  • Other users: whatever you choose to send in a chat, a room or a game, and the display name, gender and country shown on your profile card.
  • Courts, police and government agencies: when the law requires it or we receive a valid order (see section 12).
  • To protect people: to report child sexual abuse material or serious threats to the authorities, and to defend ourselves in a legal claim.
  • A buyer or successor if the service is ever transferred, with the same protections.

6. How long we keep data

  • Random chat messages: not stored. Images and voice notes sent in random chat are deleted from our servers within a few hours.
  • Voice and video calls (including the optional voice mode in Scribble): not recorded or stored by us. They run directly between the people on the call or through a relay server.
  • Global chat messages: deleted 15 minutes after they are sent. Chat room messages: 10 minutes.
  • Game chat lines (for example in Scribble): kept only briefly, and longer if a report needs them.
  • Reported content under review: as long as needed to investigate and enforce any ban, then deleted. Saved copies of reported conversations are cleared after 30 days once a report is closed, and after 180 days in every case.
  • Flagged-image choice records (username, IP, time, choice): at least 180 days.
  • Server and connection logs (IP address, timestamps): at least 180 days, as CERT-In’s 2022 directions require, and longer if a legal request requires it.
  • Account and registration details: for as long as your account exists, and for at least 180 days after it is deleted or cancelled, as the IT Rules require.
  • Ban and security records: kept in a secure log to prevent evasion and meet legal requirements. Permanent-ban and child-safety records are kept as needed for platform safety and legal reporting.
  • VIP and payment records: for as long as accounting, tax and fraud-prevention rules require. Deleting an account does not erase them.
  • Sign-in tokens: expire after 30 days of inactivity. Activity trail: 30 days.

When the purpose has ended and no law requires us to keep the data, we delete it or make it non-identifiable.

7. Moderation and automated tools

We use automated tools and limited human review to keep the platform safe and to meet the due diligence expected of an intermediary. They do not make us the author, editor or publisher of what users say.

  • Word and content filters check Global chat, rooms and game chat in English, Hindi and Hinglish.
  • Phone numbers, links and social-media IDs are blocked to protect you from scams and unwanted contact.
  • Rate limits and spam detection apply, for example 3 messages a minute in Global chat.
  • Image screening runs partly in your own browser and partly on our server, and blocks suspected nudity.
  • AI review of reports may recommend an outcome. A person reviews anything unclear. AI decisions can be wrong. You can ask for a human review by writing to us.

8. Children

ChatAnony is for adults aged 18 and over. We do not knowingly collect personal data of anyone under 18, and we do not track, profile or target ads at children. Our age check is a confirmation you give us, so we cannot be certain of every user’s age. If we learn that someone is under 18, we block them and delete their data, except what we must keep for safety and legal reporting. Parents who believe a child has used the site can write to us at the address below, and we will act quickly.

We have zero tolerance for child sexual abuse material (CSAM) and any content that sexualises or endangers a child. When we find or are told about it, we ban the user permanently, preserve the evidence and report it to the police and the National Cyber Crime Reporting Portal (cybercrime.gov.in), as the POCSO Act, 2012 and the IT Act require.

9. Your rights under the DPDP Act

You have the following rights over the personal data we hold about you (mainly your email, account and VIP details, and safety records):

  • Access: a summary of the personal data we hold and who we shared it with.
  • Correction and erasure: ask us to fix wrong data or delete it. We may have to keep ban, report, child-safety and payment records where the law requires or where we need them for safety or legal claims.
  • Withdraw consent: stop using the service, remove your email, or opt out of personalised ads. This does not affect what was lawfully done before.
  • Grievance redressal: complain to our Grievance Officer (section 11). If you are not satisfied, you can complain to the Data Protection Board of India once it is operational.
  • Nominate another person to exercise these rights if you die or become unable to.

To use a right, write to privacy@chatanony.fun from the email linked to your account, or give us your username so we can check it is yours. We reply within 30 days, and sooner where we can. Without an account, there is usually little to request, because most data is not stored. You can always clear your cookies, delete your account request, or stop using the service.

10. Security and breaches

We use HTTPS and encrypted WebSocket connections, store passwords only as one-way hashes, restrict access to our systems and monitor them. No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board as the DPDP Act requires, and we report cyber-security incidents to CERT-In within the time its directions set (six hours of becoming aware).

11. Grievance Officer

As required by the IT Act, 2000, the IT Rules, 2021 and the DPDP Act, our Grievance Officer is:

  • Name: Grievance Officer, ChatAnony team
  • Email: contact@chatanony.fun
  • Address: write to contact@chatanony.fun (we give our postal address to courts and authorities on a lawful request)

We acknowledge every complaint within 24 hours and aim to resolve it within 7 days. Complaints about intimate images shared without consent are acted on within 2 hours, and we act on valid court or government orders within 3 hours. Full details, including how to appeal, are on our Grievance Redressal page.

12. Requests from the authorities

We assist courts and lawful government agencies as the law requires. That can include preserving records and, on a written order, giving identity-verification or investigation information within 72 hours.

13. International users and transfers

Some of our service providers (Cloudflare, ad and analytics networks, the email provider and the AI provider) run servers outside India. Where that happens, we rely on their security safeguards and on the transfers the DPDP Act permits. We do not sell your data in India or abroad.

14. Changes to this policy

We may update this policy as the law and the service change. We show the date at the top and, for material changes, we remind you in the app. We also remind all users of our rules and the consequences of breaking them at least once every three months, as the IT Rules require.

15. Contact

Privacy questions and data requests: privacy@chatanony.fun. General questions: contact@chatanony.fun. Legal notices and law-enforcement requests: legal@chatanony.fun. Complaints: our Grievance Officer.