Privacy Policy
1. Who is responsible
DD Corporation operates Pera Chats and is the controller of the personal data described here. Contact: perachats@yahoo.com.
2. What happens to your messages
Text, photos and voice messages are encrypted in your browser with a key derived from the secret in the room’s invite link. That secret is in the part of the link after “#”, which your browser does not send to any server. We and our providers store only the encrypted result. We cannot read message content. Anyone who has the invite link can read the room, and so can anyone you share it with.
3. Data we or our providers hold
- Stored on our servers: a room identifier (not the invite link itself), whether the room has ended, encrypted message bodies, message timestamps, approximate message size, and emoji reactions together with a random identifier.
- Sent live, not end-to-end encrypted: your random nickname, random user ID, online status, typing and read indicators. They are relayed in real time to others in the same room and are not stored by us.
- Technical logs: IP address, browser and device type, request times. These are collected by our hosting and infrastructure providers when you use the Service.
- Not collected: name, email, phone number, contacts, location, advertising identifiers, or analytics. We use no advertising or tracking cookies at present. If that changes we will update this policy and ask for consent where required.
4. What stays on your device
Your browser stores your room invites (so you can reopen rooms), your random nickname and ID per room, your consent record, and cached app files for installation. The microphone is used only while you record a voice message, and photos are resized in your browser before being encrypted. You can remove everything by clearing this site’s data in your browser. Anyone with access to your unlocked device may be able to open your rooms.
5. Why we use data, and our legal basis
We use data to run and secure the Service, prevent abuse, and comply with the law. Where GDPR or similar laws apply, our bases are performing the Service you ask for, our legitimate interests in security and abuse prevention, and legal obligations.
6. Who we share data with
We use third-party cloud hosting, database and real-time infrastructure providers, which may process data in several countries. We do not sell data. We may disclose data we hold (encrypted content, metadata, and logs we can access) if required by law, to protect people from harm, or to respond to valid legal process. We cannot decrypt messages, so we cannot hand over their content, but a person who has the invite link could. We may preserve and report illegal material, including child sexual abuse material, to the competent authorities.
7. How long we keep it
Ending a room deletes its stored messages. Rooms that are not ended may remain until we remove them (we may delete inactive rooms automatically). Provider logs are kept according to their own retention practices. We may keep information longer where needed for legal reasons or to deal with abuse.
8. Security and its limits
We use encryption in the browser, HTTPS, restrictive security headers and database access rules. No service is perfectly secure. We cannot stop other people from screenshotting, copying or recording a conversation, or from sharing an invite link. Keep links private.
9. Adults only
The Service is for people aged 18 and over. We do not knowingly allow minors. If you think a minor has used it, contact us and we will act where we can.
10. Your rights
Depending on where you live, you may have rights to access, correct, delete or object to our use of your data. Because there are no accounts and we cannot read content, we may be unable to identify your data. Contact perachats@yahoo.com and we will help where we can. You may also complain to your local data protection authority.
11. Changes and contact
We may update this policy and will change the effective date when we do. Questions: perachats@yahoo.com.