eChat.lol has no accounts and never asks who you are. We collect the minimum needed to keep the chatroom safe, under UK data protection law (UK GDPR). Our lawful basis is legitimate interests: preventing abuse, spam and illegal content.

What we keep

• An anonymous cookie (echat_sid): a random id so we can apply message limits and cooldowns. It is not linked to your name, email or device. Your random chat name (like SleepyToaster42) is worked out from it, so clearing your cookies gives you a new name.
• A scrambled network code: a one-way hash of your IP address, used only for rate limits. We never store your IP address itself.
• Your country: worked out from your IP address by our host and shown as a small flag next to your messages. Only the country is kept, never your city or IP.
• Your messages: published messages are public. Messages we reject or hold for review are kept for up to 30 days so moderators can review decisions, then deleted.
• Security records (rule violations, cooldowns, rate-limit counters): kept for up to 30 days. Reports you make about messages are kept with the scrambled codes above so moderators can spot abuse of reporting.

Who else sees it

Message text is sent to OpenAI's moderation service to check it for harmful content before it is published. Cloudflare Turnstile checks that you are a person. GIFs are served by GIPHY. We count visits with Umami, a privacy-friendly analytics service that uses no cookies and collects no personal data. Advertisers pay through Stripe; we keep their email and booking details for our records.

Your rights

Because we don't know who you are, we usually can't link messages to you. If you believe something identifies you, or you want to complain, email hello@echat.lol and we'll help. You can also complain to the ICO (ico.org.uk).