privacy policy

• We don't have user accounts, so we don't ask for your name, email, or any other identifier.
• We run our own privacy-friendly, aggregate analytics — no advertising, no third-party trackers, no selling of data. We record coarse, de-identified usage (page views, chat events, approximate country) to understand how the site is used.
• Live sessions are in-memory and gone when the chat ends. For quality, we keep a short AI-generated summary of each chat and a redacted transcript of each chat — all de-identified and auto-deleted after ~30 days.
• Your chat messages are sent to Anthropic's Claude API for processing — that's how the AI personas work. Their privacy policy applies for that data flow.
• Your local preferences (country, language, intent, age confirmation, sound, notification permission) are stored in your browser's local storage on your device. We don't have a copy.

IP address (transient, never stored)

Your IP address is visible to our servers when you make a request — that's how the internet works. We use it for two things, both in-memory only and dropped on server restart:

• Rate limiting (per-IP cap on how many chats you can start per minute, to prevent abuse).
• Captcha gating (counter of how many chats you've started since your last captcha verification).
• Approximate country lookup for aggregate analytics (e.g. "visitors by country"). We derive only the country code and discard the IP — we never store your IP alongside it.

We do not log IP addresses to disk and do not associate them with any other identifier. Country is derived locally using GeoLite2 data created by MaxMind (maxmind.com).

Chat messages (transient, processed by Anthropic)

When you send a message to a "stranger," the message is forwarded to Anthropic's Claude API along with the persona's system prompt and the recent message history of that chat. Anthropic processes the message and returns a reply. Their data handling is governed by Anthropic's privacy policy and you should review it.

We do not retain your full chat by default beyond the active session. To improve the AI personas, two things are kept in our own analytics store and auto-deleted after about 30 days:

• A short, AI-generated summary of each chat (what it was about, how it went) — not the raw messages.
• A redacted transcript of each chat. Before storage we strip obvious identifiers like emails and phone numbers, and keep only the most recent part of the conversation. We never store who you are alongside it.

Our own privacy-friendly analytics

We run our own lightweight analytics to understand aggregate usage of the site (how many people visit, which pages, approximate country, device type) — never anything that personally identifies you. We do not use advertising networks or third-party trackers, and we never sell data.

• To tell apart new vs. returning visitors we set a single first-party identifier and derive a per-day, salted hash of your IP + device. The salt rotates every 24 hours, so these cannot be tied back to you over time.
• We do not track you across other websites.
• We record coarse, aggregate events — a page view, a chat starting and ending (with the reason and a rough duration), and when our content filter blocks a message. These contain no message content, no name, and no stored raw IP address.

These exist so we can see whether the product is working — funnel conversion, average chat length, abuse rates — not to track individuals.

Cloudflare Turnstile (captcha)

Roughly every 5 chats we present a captcha challenge from Cloudflare Turnstile to verify you're a human. Cloudflare is the data processor for that challenge; their privacy practices are governed by Cloudflare's privacy policy. Turnstile is privacy-friendly compared to Google reCAPTCHA — it does not track you across sites.

• No accounts, names, emails, or phone numbers.
• No Google Analytics, no Mixpanel, no Facebook Pixel, no advertising trackers, no third-party fingerprinting.
• No persistent server-side history of your chats.
• No advertising or cross-site tracking cookies — only the first-party identifier described in the analytics note above.

We use your browser's localStorage to remember your preferences (country, language, gender, interest, intent, AI acknowledgment, age confirmation, sound on/off, notification preference). These are stored on your device. Clearing your browser data deletes them.

Cloudflare Turnstile may set short-lived cookies as part of the captcha challenge process. These are managed by Cloudflare.

Chat sessions: in-memory only, deleted on chat end or server restart.
Local preferences: retained on your device until you clear them.
Server logs: minimal operational logs (errors, request counts) are retained for up to 7 days for debugging. We do not log message content or IPs.

unknown.chat is not intended for children under 13. Adult-coded conversation modes (flirt, love) require self-attestation that you are 18 or older. If we become aware that we have inadvertently collected data from a child below the applicable age, we will delete it.

Because we don't store an identifiable record of you, there's typically nothing for us to "give you a copy of" or "delete on request." Your data lives on your device. You can:

• Clear your local preferences by clearing your browser's site data for unknown.chat.
• Stop using the service at any time.
• Contact us with any questions (see about).

For data flowing through Anthropic, you may exercise data-subject rights with Anthropic directly per their privacy policy.

If you're using unknown.chat from outside the country where our servers are hosted, your data is transferred internationally. Anthropic's API may also transfer data to the United States or other regions for processing. By using the service you consent to these transfers.

If we change this policy in any material way, we'll update the "Last updated" date above. Continued use after changes means you accept the updated policy.

For privacy questions or concerns, email us at support@unknown.chat.