Privacy Policy
Last updated: August 31, 2026
FlashRoom is built to collect as little as possible. There are no accounts, no passwords, no persistent user profiles, and no chat history stored on our servers. Almost everything that happens in a room exists only in server memory and is deleted the moment the room expires.
1. What we don't collect
- No account registration, no username/password, no email address (unless you separately contact us for support).
- No chat message history — messages are relayed live and never written to disk.
- No persistent identity — the random handle you're given (e.g. "SpeedyFox-23") is generated fresh each session and is not linked to any previous session.
- No advertising trackers, no third-party analytics scripts on the chat client.
2. What we do process, and why
| Data | Purpose | Retention |
|---|---|---|
| Room state (your handle, current room, Pro/Day Pass status) | Required to run the room you're in | In server RAM only; deleted when the room expires or you disconnect |
| IP address | Inherent to any network connection; used transiently for abuse / rate-limit prevention | Not written to a persistent database by FlashRoom; standard infrastructure-level connection logs may exist briefly at the hosting/network layer |
| Payment information (Day Pass, Monthly Pro, P2P payments) | Processing your purchase or payment | Handled entirely by Stripe — FlashRoom never receives or stores your card number. See Stripe's own privacy policy for how they handle payment data. |
| Stripe Connect onboarding info (P2P payment recipients only) | Identity verification required by Stripe/financial regulation before you can receive P2P payments | Collected and retained by Stripe directly, not by FlashRoom |
| Monthly Pro redeem token | Lets your Pro subscription survive a reconnect without an account | Stored locally on your device only (browser localStorage or a local file in the app) — never uploaded to us in a database |
3. Third parties
FlashRoom uses Stripe to process all payments, including Day Pass, Monthly Pro, and peer-to-peer payments. Stripe is a PCI-compliant payment processor and acts as an independent data controller for the payment information you give it. Review Stripe's privacy policy at stripe.com/privacy.
The site itself is hosted on Cloudflare; the chat backend runs on a dedicated server. Both may retain standard, short-lived infrastructure logs (e.g. for abuse prevention and uptime) that are not FlashRoom-specific chat content.
4. Other people in your room
Anything you type in a room is visible to everyone else currently in that room, in real time. We do not moderate or review messages before they're delivered, and because nothing is stored, we generally cannot retrieve message content after the fact if you report an incident — report abuse as soon as it happens.
5. Children's privacy
FlashRoom is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect information from children.
6. Your rights
Because FlashRoom does not maintain accounts or persistent profiles, there is generally no stored personal data tied to you for us to export or delete beyond what's covered above. For questions about data Stripe holds on your behalf, contact Stripe directly. For any other privacy question, contact us at xstreamio001@gmail.com.
7. Changes to this policy
We may update this policy as the product changes. Material changes will be reflected by updating the date at the top of this page.