Privacy Policy
This policy explains how UNKNOWN handles information when you use its anonymous, text-based conversation service. UNKNOWN is designed not to require a public profile, email address, phone number or real name. Anonymous use does not mean that no technical data is processed.
1. Who operates UNKNOWN
Launch requirement: The legal name and address of the service operator, and a working privacy contact email, must be published here before public launch. The operator must replace this paragraph with verified details. Do not rely on an anonymous brand name as the legal identity of the data controller.
2. Information the service handles
- Guest session: A random session identifier, generated nickname, session status, creation and expiry timestamps, and the fact that you checked the 18+ confirmation. The session cookie contains a random token; the database stores its hash rather than the raw token.
- Conversation preferences: Matching mode, selected interests and language are sent to the matching service while you seek a conversation.
- Messages and voice notes: Text and short voice-note audio are relayed between the two connected guests. The application does not save message transcripts or audio files to its database or object storage. Voice audio is forwarded through the active real-time connection and may be held temporarily in service memory and the recipient browser while being delivered or played.
- GIF search and sharing: When GIF search is configured and used, the search query is sent directly from your browser to GIPHY. GIPHY may receive your IP address and request/device data under its own privacy terms. Selected GIFs are loaded by both guests from GIPHY's media CDN; UNKNOWN stores neither the GIF file nor a copy of it.
- Reports: If you report a conversation, the service stores the report reason, temporary session references, status and timestamps. It does not attach the chat transcript.
- Blocks: If you block someone, temporary session references and timestamps are stored to prevent those two guest sessions from being matched again during the block period.
- Security and operations: The hosting and network provider may process connection data such as IP address, request metadata and diagnostic logs. The application hashes the connecting IP before using it as a session-creation rate-limit key.
3. Cookies and session duration
UNKNOWN uses a first-party, HttpOnly, Secure (on HTTPS), SameSite=Strict guest-session cookie. The cookie is configured to expire after four hours. A guest session is also time-limited. Closing a tab does not necessarily revoke the session immediately; it expires automatically. You can leave a conversation using the in-product controls.
4. Why information is used
- To create temporary guest sessions and connect compatible guests.
- To deliver text, temporary voice notes, GIF references and operate chat controls.
- To receive reports, apply session-level blocks and maintain moderation records.
- To limit automated or abusive session creation and protect service availability.
- To maintain, secure and troubleshoot the service.
5. Retention
Guest sessions are configured for a four-hour lifetime. Report records are configured to expire after 90 days. Session-level block records are configured to expire after 180 days. A daily scheduled cleanup removes expired reports, blocks and expired or revoked guest sessions. Moderation audit records currently have no automatic expiry configured. Infrastructure-provider logs may follow that provider's separate retention schedule. These periods may change if the service is updated; this policy must be reviewed whenever data handling changes.
6. Service providers and transfers
UNKNOWN currently uses Cloudflare services for hosting, application execution, database storage and real-time connections. Those providers process information as needed to deliver and secure the service, under their own terms and privacy documentation. If GIF search is enabled, GIPHY receives search requests directly from your browser and serves selected media from its CDN. Review GIPHY's privacy and API terms before enabling this feature. Infrastructure may process data outside your state or country. The operator must verify applicable contractual, transfer and disclosure requirements before launch.
7. Safety and age
UNKNOWN is intended for adults aged 18 and over. The current age gate is a self-attestation checkbox, not identity or age verification. Do not treat it as proof of age. Do not share passwords, financial details, addresses or other identifying information in a conversation. Reports are not guaranteed to be reviewed until a trained moderation team and response process are operating.
8. Your choices and requests
Because guest sessions are temporary and not tied to a verified identity, the operator may need limited information to locate a specific record or assess a request. Once the operator's verified privacy contact is published, you may use it to ask about access, correction, deletion, grievance handling or other rights available under applicable law. The operator must establish a working request process and response timelines before launch.
9. Children
UNKNOWN is not intended for anyone under 18. If the operator becomes aware that a minor has used the service, the operator should follow its documented safety and legal response process.
10. Changes and contact
Material changes to this policy will be reflected on this page with an updated date. The operator's legal identity, jurisdiction, and working contact details are launch blockers and must be completed before this policy is presented as final.
This is a product-specific draft, not legal advice or a statement of legal compliance. Have qualified counsel review it against the actual operator, deployment, data flows and applicable law before launch.