BanterPrivacy Policy
Last updated: 17 June 2026
Bantertalks ("we", "us") provides an embeddable live-chat service at bantertalks.com. This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it. We've tried to keep it short and plain.
1. What we collect
- Account data — when you register, we store your username, email address, a hashed password (we never see the plaintext), and the date you created the account. If you sign in with Google, we also store your Google account identifier and the email address Google gives us — we never see or store your Google password.
- Chatbox data — for each chatbox you create, we store its name, handle, settings, moderator list, and the messages posted in it.
- Messages — message content, timestamp, the sending account or guest name, and the sender's IP address. Messages are retained for 48 hours in the live chat and then pruned; moderator action logs are kept longer to support moderation history.
- Guest data — if you chat as a guest without an account, we store the temporary name you used, your message content, and your IP address — same 48-hour retention as account messages.
- Technical data — IP address, browser user-agent, the URL the chat is embedded on, and basic request metadata, used to operate the service, prevent abuse, and let moderators ban abusive users.
- Payment data — if you buy a premium emote pack, the purchase is processed by PayPal. We store the PayPal order ID, amount, currency, and status. We do not see or store your card number or PayPal password.
2. Why we collect it
- To operate the chat service (deliver messages, show the right rooms, remember your settings).
- To moderate abuse — IP addresses let chatbox owners and moderators ban disruptive users, including ban-evaders.
- To prevent spam and brute-force attacks (rate limiting, flood control).
- To send essential transactional emails (email verification, account-related notifications). We do not send marketing emails.
- To process premium-pack purchases.
3. Who we share it with
We are a small operation and do not sell your data. We share the minimum necessary with a small set of service providers:
- Cloudflare — front-line proxy and DDoS protection. All traffic to bantertalks.com passes through Cloudflare's edge.
- Hetzner (Germany) — hosts our application server and database.
- Resend — sends our transactional email (verification links).
- PayPal — processes premium-pack payments.
- Google — only if you choose "Continue with Google" to sign in; Google authenticates you and shares your email, name, and profile picture with us. Their privacy policy: policies.google.com/privacy.
We disclose information when required by law (e.g. court order) or when necessary to protect the rights, property, or safety of Bantertalks, our users, or others.
4. Cookies and local storage
We use a single session token stored in your browser's localStorage to keep you signed in — it isn't a tracking cookie. On our marketing pages we also load Google Analytics (gtag.js) which sets standard analytics cookies; this is skipped inside embedded chatboxes on third-party sites.
5. How long we keep data
- Chat messages: 48 hours, then auto-pruned.
- Moderator action logs: kept indefinitely to support moderation history.
- Account data: kept while your account exists. Delete your account and we delete the row.
- Purchase records: kept for accounting purposes.
6. Your rights
If you are in the UK / EU / EEA, you have the right to access, correct, delete, or export your personal data, and to object to or restrict processing. Email [email protected] and we'll respond within 30 days.
7. Children
Bantertalks is not directed at children under 13. If you believe a child under 13 has provided us personal data, contact us and we will delete it.
8. International transfers
Our servers are in Germany (EU). Cloudflare, Google, PayPal and Resend may process data outside the EU under standard contractual clauses or equivalent safeguards.
9. Security
Passwords are stored hashed with scrypt + per-user salt. The site is served over HTTPS (TLS 1.2+). No system is perfectly secure; if you suspect a breach affecting your account, change your password and email us.
10. Changes
We may update this policy. Material changes will be announced on the homepage. Continued use after a change means you accept the updated policy.
11. Contact
Questions about this policy or your data: [email protected].