PeerTalk1. Who We Are
PeerTalk, including peertalk.chat, the anonymous group chat and the embeddable PeerTalk Widget, is operated by Mind Chat AI, 10 W 37th St, New York, NY 10018, United States ("we", "us", "our"). Mind Chat AI is the controller of the data described in this policy.
For all privacy requests and questions, contact support@peertalk.chat.
2. What Data We Collect
Data you provide voluntarily:
| Data | Purpose | Retention |
|---|---|---|
| Chat messages | Display in chat | 24 hours, auto-deleted |
| Anonymous username | Display in chat | Browser only (localStorage) |
| Sentiment votes | Leaderboard, statistics | 24 hours, auto-deleted |
| Token upgrade details | Display in widget | Permanent (paid service) |
| Report submissions | Content moderation | 30 days |
| PeerTalkID Account ID | If you choose to log in with PeerTalkID, we store your account identifier (a UUID). This ID has no connection to your real-world identity — PeerTalkID is an anonymous identity system. It is used solely to enable cross-device chat history, Premium features, and display name preferences. It is never linked to your IP address or any personal information. | Until you delete your account via Profile → Delete Account |
Data collected automatically:
| Data | Processing | Retention |
|---|---|---|
| IP address | Hashed with SHA-256 immediately — original IP never stored | Hash stored max. 24h, then auto-deleted |
| Browser UUID | Stored in your browser only, never linked to identity | Browser localStorage only |
| Message timestamps | Required for chat functionality | 24 hours |
| PeerTalkID session token | Stored in sessionStorage (tab-only, never persisted beyond the browser tab). Never sent to third parties. Cleared automatically when the tab is closed. | Duration of browser tab session only |
3. How We Use Your Data
We use data only to operate, secure and moderate the Service. For users in the European Economic Area (EEA) and the United Kingdom, the legal bases are:
| Processing activity | Legal basis (EEA/UK) |
|---|---|
| Displaying chat messages | Legitimate interests — providing the chat you use |
| Rate limiting (IP hash) | Legitimate interests — preventing abuse |
| Content moderation | Legitimate interests and compliance with legal obligations |
| Token upgrade data | Performance of a contract |
| PeerTalkID login & cross-device history | Consent — you actively choose to log in |
| Fraud prevention | Legitimate interests |
We do not use your data for advertising or profiling, we do not sell or share it with third parties for advertising, and we do not make automated decisions with legal effects.
4. Anonymization Measures
IP Address: Your IP address is immediately hashed using SHA-256 with a secret salt. The hash is used only for rate limiting. The original IP address is never stored in our database.
Messages: All chat messages are encrypted at rest using AES-256-GCM encryption and permanently deleted after 24 hours.
Identity: Your anonymous username is generated locally in your browser and stored only in localStorage. It is never linked to your real identity.
PeerTalkID: The PeerTalkID account ID is a randomly generated UUID. It contains no name, email, or any other identifying information. Even we cannot determine who a PeerTalkID account belongs to in the real world.
DM Private Keys: End-to-end encryption keys for private messages are stored in your browser's IndexedDB as non-extractable CryptoKey objects. They cannot be exported or read by any script — including ours.
5. Data Retention
| Data type | Retention period |
|---|---|
| Chat messages (encrypted) | 24 hours — automatically deleted |
| IP address hashes | 24 hours — automatically deleted |
| Sentiment votes | 24 hours — automatically deleted |
| System notifications | 7 days — automatically deleted |
| PeerTalkID Account ID & profile | Until account deletion — delete via Profile → Delete Account |
| PeerTalkID session token | Browser tab session only — cleared on tab close |
| Token upgrade data | Permanent — part of paid service |
| Report records | 30 days — for moderation |
6. Service Providers
PeerTalkID (id.peertalk.chat): Optional anonymous identity system operated by Mind Chat AI as part of PeerTalk. When you log in with PeerTalkID, your account UUID is shared with our server for verification. No name, email, or personal data is involved.
Hostinger (Hosting): Our servers are hosted by Hostinger in Frankfurt, Germany. Standard server access logs may be retained per their privacy policy.
MoonPay / Helio (Payments): Payments are currently disabled. When enabled, token upgrades and Premium subscriptions redirect to MoonPay Commerce or Helio. We do not process or store payment card data. See MoonPay Privacy Policy.
Alchemy / Helius (Blockchain Data): We use these APIs to fetch publicly available token metadata. No personal data is shared beyond the token contract address.
Font Awesome and Google Fonts (CDN): Icons and web fonts loaded via CDN (cdnjs.cloudflare.com, fonts.googleapis.com, fonts.gstatic.com) may transmit your IP to the CDN provider as part of a standard HTTP request.
7. Where Data Is Processed
Our servers are located in Frankfurt, Germany. Mind Chat AI is based in the United States, and some service providers listed above may process data in other countries. Where personal data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses where required.
8. Your Privacy Rights
EEA and UK users. Subject to applicable law, you have the right to:
Access
Request a copy of data we hold about you
Rectification
Request correction of inaccurate data
Erasure
Request deletion — or use Profile → Delete Account for instant self-deletion
Restriction
Request restriction of processing
Portability
Receive your data in machine-readable format
Objection
Object to processing based on legitimate interests
Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work.
U.S. state privacy rights. Depending on where you live (for example, California), you may have the right to know what personal information we process, to request its deletion or correction, and to opt out of its sale or sharing. We do not sell or share personal information, and we do not use it for targeted advertising. We will not discriminate against you for exercising your rights. You or an authorized agent may submit requests to support@peertalk.chat.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13, consistent with the U.S. Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us with personal information, contact support@peertalk.chat and we will delete it.
10. Cookies & Local Storage
PeerTalk does not use tracking cookies or advertising cookies.
We use browser localStorage to store:
- Your anonymous UUID (randomly generated, stays in your browser)
- Your anonymous username (randomly generated, stays in your browser)
- Your vote history (to prevent duplicate votes)
- Your light/dark theme preference
We use browser sessionStorage to store:
- PeerTalkID session token (only if you log in; cleared when the tab is closed)
We use browser IndexedDB to store:
- DM encryption keys (non-extractable CryptoKey objects — cannot be read or exported by any script)
- Recent message cache (for local search; auto-expires after 24 hours)
All of this data stays in your browser and never leaves your device. You can clear it at any time in your browser settings. This storage is strictly necessary to provide the service you request, so we do not show a consent banner.
11. Security
- AES-256-GCM encryption for all stored messages
- ECDH P-256 + AES-GCM end-to-end encryption for direct messages
- SHA-256 hashing for IP addresses (irreversible)
- HTTPS/TLS for all data transmission
- Non-extractable CryptoKeys for DM private keys (browser IndexedDB)
- Automatic deletion of sensitive data after 24 hours
- Rate limiting to prevent abuse
- Regular security reviews of infrastructure
No method of transmission or storage is completely secure, but we work to protect the limited data we hold.
12. Changes to This Policy
We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, make reasonable efforts to notify users through the Service.
13. Contact
Mind Chat AI, 10 W 37th St, New York, NY 10018, United States
Privacy requests and questions: support@peertalk.chat
General enquiries: contact@peertalk.chat