Privacy Policy

Last updated: Jul 28, 2026

This policy explains what KinkChatRooms collects, why, who else sees it, and how long we keep it. It applies to kinkchatrooms.com and everything on it.

Short version: we keep what we need to run an adult chat service and to moderate it. We do not sell your personal information, and we do not share it for advertising. There are no ads, no analytics trackers, and no ad networks on this site.

1. Who we are

Skyline Online LLC, a New Mexico limited liability company
1209 Mountain Road Place NE, Ste N, Albuquerque, NM 87110, USA
contact@kinkchatrooms.com

We run the Service from the United States. If you use it from Canada or New Zealand, your information is handled in the U.S. and is subject to U.S. law, including lawful access by U.S. authorities.

2. What we collect

What you give us

  • Registered accounts: email address, username, gender, and city. Your year of birth — we store it as a date, but only the year you enter is real, so we know you're over 18 without knowing your birthday.
  • Guest accounts: username, gender, city, and year of birth. No email.
  • Optional profile details: avatar, photo gallery, bio, bubble color, and your contact filters — who can message you, allowed genders, age range, and maximum distance.
  • If you sign in with Google: your Google account identifier and email address. Nothing else, and no account is created until you finish the sign-up form.
  • Contact form: name, email, subject, and message. These go straight to our inbox and are never stored in our database.

What you create on the Service

  • Room messages, private messages, replies, reactions, and mentions.
  • Photos, videos, GIFs, and voice messages you upload, along with the original filename, size, and format.
  • Reports you file about other users, including the snapshot of the reported message or media that we capture at the moment you report it.

Webcam streams are not recorded. They pass through our relay servers live and are never written to disk.

What we record automatically

Each time you sign in, we write a connection record. This is the most sensitive thing we hold, so here is all of it:

  • Your IP address and the source port of the connection. The port matters because mobile carriers share one IP among hundreds of subscribers — without it, the record identifies no one in particular.
  • Your browser's user-agent string.
  • A device identifier: a random value your browser generates and stores, kept in local storage and a cookie for one year. It isn't derived from your hardware and tells us nothing about your device.
  • Your username, your email address, and how you signed in.
  • A frozen snapshot of your age, gender, and city as they were at that moment — so a later profile edit doesn't rewrite the record.

We also keep your last-seen time, and, while you're online, presence information — username, avatar, gender, account type, age, and city — which is visible to other users in the room and lobby lists. Your city is also converted to approximate coordinates so the distance filter can work; those coordinates come from the city you typed, never from your device's GPS.

If you change your username, we keep the old one, the new one, and the IP address you changed it from.

What we don't collect: no precise location, no contacts, no browsing history off our site, no advertising identifiers, and no payment information — the Service is free and we have no payment processor.

3. Why we use it

  • To run the Service — deliver your messages, show who's online, apply your contact filters, host your uploads, connect webcams.
  • To sign you in — send login links, keep your session.
  • To keep people safe. Screening uploads for child sexual abuse material, reviewing reports, detecting spam and scams, enforcing bans, blocking proxies and VPNs used to evade moderation, and rate-limiting abuse.
  • To respond to legal process. Connection records exist so that a valid subpoena, court order, or law enforcement request about serious harm can be answered accurately.
  • To answer you when you write to us.

We do not profile you, we do not build advertising audiences, and we do not use your messages to train AI models. The one automated system that reads content — described in section 5 — only ever sees content that someone has reported.

4. Sensitive personal information

Some of what we hold is sensitive personal information under California law and similar laws in other states. On a service like this one it can't be avoided or minimized away: your gender, and the fact that you use an adult chat site at all, say something about your sex life or sexual orientation. The rooms you join and what you write in them can say more.

We treat all of it the same way:

  • We use it only to provide the Service you asked for and to keep it safe — never to infer anything about you, and never for advertising.
  • We never sell it and never share it for cross-context behavioral advertising.
  • You can ask us to limit its use, though on this Service that means closing your account: there is no version of it that works without knowing your gender and your city.

Bear in mind what's public by design: your username, avatar, gender, age, city, bio, photos, and everything you post in a room are visible to other users. Anyone who can see them can screenshot them. Share accordingly.

5. Who else sees your information

We use outside providers to run and secure the Service. Each one receives only what its job requires. None of them may use your information for their own purposes.

Provider What it does What it receives
Cloudflare R2 (US)Stores and delivers uploaded mediaYour photos, videos, and voice messages
Resend (US)Sends our emailsYour email address and the contents of the email
Project Arachnid Shield (Canadian Centre for Child Protection)Checks every uploaded image against known child sexual abuse materialThe image itself, before we store it
Sightengine (France)Estimates whether a reported image shows a minorThe reported image only
OpenAI (US)First-pass review of reported textThe reported text, the reason given, and the reported account's username, gender, and bio
proxycheck.ioDetects proxies and VPNs used to evade bansYour IP address
NeverBounce (US)Checks an email address is real at sign-upYour email address
Photon / Komoot (Germany)Turns the city or ZIP code you type into a real placeWhat you typed. No IP, no account identifier
Google (US)Optional sign-inStandard OAuth exchange; we get your Google ID and email
Our own relay serversCarry webcam audio and videoThe live stream, plus your account ID in the relay credentials

Two things your browser contacts directly, not us:

  • Google STUN servers, which webcam connections need to find a path between two browsers. Your browser reveals its public IP and port to them.
  • YouTube. When someone posts a YouTube link in a room or a conversation, your browser loads the thumbnail from Google as soon as the message appears — so your IP address and user-agent reach Google even if you never click. Clicking loads the player from youtube-nocookie.com.

Law enforcement and legal process

We disclose information to law enforcement when we're served with a valid subpoena, court order, or warrant, and in emergencies involving a risk of death or serious injury. When we find apparent child sexual abuse material, we block the upload, retain the cryptographic hashes and account details, and cooperate with law enforcement and child protection organizations. We never store the material itself — it is rejected in memory and never written to disk.

Business transfer

If the business is sold or merged, information may transfer to the buyer, who would be bound by this policy until it gives you notice of a new one.

6. How long we keep it

These are the periods our systems actually enforce, automatically:

What How long
Guest accounts and everything attached to them24 hours after sign-up or last activity, then permanently deleted
Registered accountsUntil you delete the account
Connection records (IP, source port, device identifier, user-agent, username, email, age/gender/city snapshot)12 months
Room messagesThe most recent 500 messages per room; older ones are deleted continuously. There is no fixed time limit — a quiet room keeps its messages longer
Private messagesUntil you delete them, or until either account is deleted. We do not delete them on a schedule
Messages you delete24 hours, then permanently erased — unless the message is attached to a moderation record
Uploaded mediaAs long as the message it belongs to; deleted with it
Reports and the evidence captured with them30 days after the report is filed
Moderation records90 days
Notifications90 days
Ban records (email address and device identifier)Kept indefinitely — a ban that expired from our records would not be a ban
Records of blocked child sexual abuse material (hashes and account details, never the image)Kept indefinitely
Username change history, including the IP address usedKept indefinitely
Email addresses that bounced or reported us as spamKept indefinitely, so we stop emailing them
Login links / email-change links / sessions15 minutes / 7 days / 14 days

Short-lived technical caches — proxy checks for 72 hours, city lookups for 10 minutes — live in memory and disappear when the server restarts.

7. Cookies and local storage

We use no advertising cookies, no analytics cookies, and no third-party trackers. What we do set:

  • Session cookie — keeps you signed in. Required.
  • Security token — protects forms against cross-site request forgery. Required.
  • Device identifier — a random value stored in your browser for one year, used to enforce bans. It is generated locally and is not a fingerprint.
  • Local preferences — your room and filter choices, kept in your browser and never sent to us as a profile.

Clearing your browser data removes all of these. Clearing the device identifier doesn't lift a ban — bans also follow the email address.

8. Deleting your account

Go to your profile, open Danger zone, and choose Delete account. It happens immediately, with no waiting period and no confirmation email. Your email address and username are scrambled right away, then a background job removes the rest.

What is deleted:

  • Your profile, avatar, and photo gallery, including the stored files.
  • Your private messages, sent and received, with their attachments.
  • Your notifications, mentions, reactions, blocks, and friendships.

What survives, and why:

  • Your room messages. They stay in the rooms, detached from your account and no longer attributed to you — deleting one person's side of a public conversation would gut it for everyone else. They disappear on their own as the room fills past 500 messages.
  • Your connection records, for the rest of their 12 months. The link to your account is removed, but the IP address, port, device identifier, and the username and email captured at connection time remain. These records exist to answer legal process, and letting anyone erase them on demand would defeat that.
  • Moderation records and ban records, on their own schedules above.

A suspended account can't be deleted. Otherwise deleting and re-registering would erase a ban. Write to us to contest a suspension.

Guest accounts need no action — they're deleted automatically after 24 hours.

9. Your choices and requests

Whoever you are and wherever you live, you can:

  • See and correct most of what we hold — your profile page is editable at any time.
  • Delete your account yourself, as described above.
  • Control who reaches you — contact filters, blocking, and closing your DMs entirely.
  • Ask us for a copy of your information, or ask us to delete something specific.

For anything that isn't self-service, write to contact@kinkchatrooms.com from the email address on the account. We answer within 45 days and will tell you if we need longer. Requests are handled by hand — there is no automated export button.

We may decline a request where the law lets us: to keep a security or moderation record, to comply with a legal obligation, or where we can't reasonably verify that the request is yours. If we decline, we say why.

We never charge for this and never treat you differently for asking.

10. Security

Traffic is encrypted in transit. Media sits in access-controlled object storage. We don't use passwords at all — sign-in is by one-time email link — so there is no password of yours for anyone to steal from us. Access to production data is limited to the people who operate the Service.

No system is perfectly secure, and we can't promise nothing will ever go wrong. If a breach affects your information, we'll notify you and the authorities where the law requires it.

11. No one under 18

This Service is for adults. We don't knowingly collect information from anyone under 18 — not from children under 13 in the sense of the Children's Online Privacy Protection Act, and not from anyone between 13 and 17 either.

If you believe a minor has an account here, tell us at contact@kinkchatrooms.com and we'll remove the account and its content.

12. Changes to this policy

When this policy changes, we update the “Last updated” date at the top. For material changes we post a notice on the site before they take effect.

13. Contact

Skyline Online LLC
1209 Mountain Road Place NE, Ste N
Albuquerque, NM 87110, USA

Privacy questions and requests: contact@kinkchatrooms.com
Legal notices: legal@kinkchatrooms.com

A. U.S. state privacy rights

If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or another state with a comprehensive privacy law, you have these rights:

  • Know and access — what we collect about you, where it came from, why we have it, and who receives it. Sections 2, 3, 5, and 6 answer this for everyone; you can also ask for your own copy.
  • Delete — see section 8 for what goes and what stays.
  • Correct — your profile is editable; write to us for the rest.
  • Opt out of sale, sharing, and targeted advertising — there is nothing to opt out of. We don't sell personal information, we don't share it for cross-context behavioral advertising, and we run no advertising on this site. That's also why a Global Privacy Control signal has no effect here: there is no sale or sharing for it to stop.
  • Limit the use of sensitive personal information — we already use it only to provide the Service and keep it safe, which is the permitted purpose. See section 4.
  • No discrimination — exercising any of these rights costs you nothing and changes nothing about your access.
  • Appeal — in Colorado, Connecticut, Virginia and other states that provide it, you can appeal a decision by replying to our response. If we deny the appeal, you may complain to your state attorney general.

An authorized agent may act for you with written permission; we'll ask you to confirm it directly.

California “Shine the Light”: we don't disclose personal information to third parties for their own direct marketing, so there's nothing to report.

Categories we collect, in the California vocabulary: identifiers (username, email, IP address, device identifier); customer records (email address); characteristics protected by law (gender, age); internet activity (connection records, presence); approximate geolocation (city-level); audio, visual, and electronic information (messages, photos, videos, voice messages, webcam streams that are never recorded); and sensitive personal information (data about sex life or sexual orientation, as explained in section 4). We collect them from you and from your use of the Service, and we disclose them for business purposes only, to the providers listed in section 5.

B. Canada — PIPEDA

If you're in Canada, the Personal Information Protection and Electronic Documents Act applies to how we handle your information.

  • Consent. You consent by creating an account and using the Service. You can withdraw it by deleting your account, subject to what section 8 says survives.
  • Access and correction. Write to us and we'll tell you what we hold, how it's used, and to whom it has been disclosed. We'll correct anything inaccurate.
  • Cross-border handling. Your information is stored and processed in the United States and is therefore accessible to U.S. authorities under U.S. law. Uploaded images are also checked by the Canadian Centre for Child Protection, in Canada.
  • Complaints. Write to us first. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.

C. New Zealand — Privacy Act 2020

If you're in New Zealand, the Privacy Act 2020 and its Information Privacy Principles apply.

  • Why we collect it. Only what we need to run and moderate the Service — sections 2 and 3. Providing it is voluntary, but the Service doesn't work without a username, gender, city, and year of birth.
  • Access and correction (IPP 6 and 7). Write to us; we respond within 20 working days. If we decline to correct something, you can ask us to attach a statement of the correction you sought.
  • Disclosure outside New Zealand (IPP 12). Your information is held in the United States and disclosed to the providers in section 5, some of which are outside New Zealand. By using the Service you authorize that transfer.
  • Privacy breaches. If a breach is likely to cause you serious harm, we'll notify you and the Office of the Privacy Commissioner.
  • Complaints. Write to us first. If you're not satisfied, you can complain to the Office of the Privacy Commissioner (New Zealand).

Content blocked

This content can't be posted — it breaks our terms and the law. Every attempt is logged.