Chattoro Log in
Legal

Privacy Policy

Last updated: October 2, 2026

This policy explains what information Chattoro collects, how we use it, who helps us process it, and the choices you have. The short version: we collect what the service needs to work, we do not sell your data, and your conversations are yours.

1. Who we are

Chattoro is a small, independently operated chat service built on the open source Fluxer platform. It is not affiliated with Discord or with the Fluxer project. If you have any question about this policy or your data, email [email protected].

2. Information we collect

Information you give us:

  • Account details: your email address, username, and password. Passwords are stored only as a salted hash.
  • Profile information you choose to add: display name, avatar, banner, bio, and profile connections.
  • Content you create: messages, reactions, images, files, and voice messages you send in communities and direct messages.
  • Voice and screen sharing: while you are in a voice room, your audio and any screen you share are relayed live to the other participants. They are not recorded or stored.
  • Reports: if you report a message, user, or community, we keep the report and the reported content so we can review it.

Information collected automatically:

  • Technical data needed to run and secure the service: IP address, device and browser type, app version, sign-in events, and error logs.
  • Approximate location: we estimate a city-level location from your IP address to show where your account is signed in (the devices list and new sign-in emails), to help keep accounts secure, and to localize some content such as GIF search. The lookup uses a database kept on our own servers, so your IP address is not sent to anyone for this. IP geolocation by DB-IP (db-ip.com), licensed under CC BY 4.0.
  • Notification tokens: if you turn on notifications, the push token for that device or browser.
  • Search index: your messages are indexed on our own server so that message search works. The index is not shared with anyone.
  • Website analytics: the public website uses Cloudflare Web Analytics, which measures page performance without cookies or cross-site tracking.

3. How we use it

  • To run Chattoro: delivering messages, syncing across your devices, and connecting voice rooms.
  • To keep it safe: preventing spam, abuse, and unauthorized access, and reviewing reports.
  • To notify you, if you ask us to: push notifications you enable, and emails about your account such as verification codes and security notices.
  • To understand service health in aggregate: for example how many messages are sent per day, never the content of your conversations.

We do not sell your personal information, we do not show advertising, and we do not use the content of your conversations to train AI models.

4. The Discord bridge

Community owners can connect their community to a Discord server. When a community is bridged:

  • Messages, edits, deletions, reactions, and attachments (as links) flow between the Chattoro community and the Discord server in both directions.
  • Each member of the Discord server gets a bridged account on Chattoro, created from their public Discord profile (username, display name, avatar, and roles), so that conversations read naturally on both sides. Bridged accounts cannot be logged into and receive no email.
  • Content you send in a bridged channel is delivered to Discord under your name and avatar, and is then also subject to Discord's terms and privacy policy.
  • If a Chattoro member sends a direct message to a Discord member who does not yet have a Chattoro account, our bridge bot may send that member one direct message on Discord inviting them to join. We send at most one such invitation per person per day.
  • If you link your Discord account (with a link code from the bot, or by signing in with Discord), your bridged account is merged into your Chattoro account and your Discord display name, avatar, banner, accent color, and public connections are copied to your profile. You can unlink in Settings at any time.

If you are a Discord user who does not use Chattoro and would like your bridged account removed, email [email protected].

5. Where your data is stored and who helps us run the service

Chattoro runs on servers we operate ourselves in the United States. A small number of companies process data on our behalf:

  • Backblaze (United States): stores uploaded files, images, avatars, and other media.
  • Cloudflare: sits in front of the service to protect it from attacks and speed it up, and provides the cookieless website analytics mentioned above.
  • SMTP2GO: delivers the emails we send you, such as verification codes.
  • LiveKit voice servers we run in the United States and in Germany: relay voice and screen-share traffic.
  • Apple and browser push services: deliver notifications to your devices; a notification may include the sender's name and a preview of the message.
  • KLIPY: powers GIF search. The search terms you type in the GIF picker are sent to KLIPY.
  • Uptide: hosts our status page. Our home page embeds a live status widget loaded directly from Uptide, so simply visiting the home page lets Uptide see your IP address and basic browser information, the same as visiting the status page itself.
  • Discord: only if you use a bridged community or link your Discord account, as described above.

When you post a link, our own server fetches that page to build a preview, so the linked site sees our server's address rather than yours.

6. How your content is shared

Messages you send in a community are visible to that community's members, and community owners and moderators can remove content and members. Direct messages are visible to the people in them. We only disclose information outside Chattoro when the law requires it, or when it is necessary to protect the safety of our users or the service. We never sell it.

7. Retention and deletion

  • Your content stays available for as long as your account is active.
  • If you delete a message, it is removed for everyone. In a bridged channel the copy on Discord is deleted as well, where the bridge is able to.
  • If you delete your account, your profile and personal information are deleted within 30 days, except for copies in routine backups (which are kept for a limited time) and anything we are legally required to keep.
  • Bridged accounts of Discord members are removed when the community disconnects from Discord, or on request.

8. Security

All traffic between your device and Chattoro is encrypted in transit. Passwords are hashed and never stored in plain text. Access to user data is limited to what is needed to operate the service. No service can promise perfect security; if you believe you have found a vulnerability, please tell us at [email protected].

9. Your choices and rights

  • Edit or delete your messages at any time.
  • Update or remove your profile information in Settings.
  • Turn notifications on or off per device in Settings.
  • Request a copy of your data from Settings (Privacy), which produces a downloadable archive.
  • Unlink your Discord account from Settings.
  • Delete your account entirely from Settings (Account).

Depending on where you live, you may also have legal rights to access, correct, export, or delete your personal information, or to object to how it is used. To exercise any of these, email [email protected] and we will respond within 30 days.

10. Children

Chattoro is not intended for children under 13, or under the minimum age required in your country if that is higher. We delete accounts that we learn belong to underage users.

11. Changes to this policy

If we make material changes, we will announce them in the app and on this page before they take effect, and update the date at the top. Questions are always welcome at [email protected].