Privacy & Data Protection

Privacy Policy

Effective Date: September 2026. Streecat is built with a privacy-by-design architecture to protect your identity and data.

Data Controller: Sithum Udayanga
Privacy & DPO Email: [email protected]

Zero Video Recording

Live WebRTC video and audio streams flow peer-to-peer and are never recorded or stored on our servers.

IP Relay Protection

We employ TURN / STUN relay proxies to minimize direct IP exposure between chat participants.

Ephemeral Chat Logs

Random text chat messages are stored only in memory during the active session and wiped upon disconnect.

1. Information We Collect

Depending on how you use Streecat, we collect minimal data required to provide and safeguard our services:

  • Ephemeral WebRTC Session Signals: Temporary SDP tokens and ICE candidate metadata necessary to establish peer connections.
  • Technical Connection Data: IP address, user agent, browser version, and rough geographic region (country-level) for rate-limiting, matchmaking, and anti-abuse protection.
  • Optional Account Details: If you register for social features (The Colony / Friends), we store your chosen username, email, encrypted password hash, and avatar.
  • Safety & Moderation Flags: Temporary violation markers and report logs submitted by users to enforce community guidelines.

2. How We Use Your Data

Your data is processed exclusively for the following purposes:

  • Matching you with compatible conversation partners across video, voice, and text rooms.
  • Preventing automated bot abuse, spamming, distributed denial-of-service (DDoS) attacks, and ban evasion.
  • Investigating severe safety complaints and complying with lawful requests from law enforcement agencies.

3. Data Retention & Erasure

We adhere strictly to the principle of data minimization:

  • WebRTC Media: 0 seconds (never recorded, strictly P2P or relayed through memory buffers).
  • Text Chat in Random Rooms: 0 seconds (purged immediately when a partner skips or disconnects).
  • Security & Access Logs: Automatically rotated and purged periodically.

4. GDPR & CCPA User Rights

Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you have the right to access, rectify, or request deletion of any personal data we hold. Since random guest chats collect no personal identification, most data cannot be linked to you after disconnect. If you hold a registered account, you may request full data deletion at any time.

5. Privacy Officer & Contact Details

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a security report, reach out directly to the Data Controller:

Data Controller: Sithum Udayanga

Email: [email protected]

Location: Streecat Global Operations