0 people connected Members' area

Privacy

ondiscute keeps the bare minimum needed to run the chat and protect the people on it, and deletes it on a fixed schedule.

In short

  • No ads, no trackers, no third-party analytics, no selling of data. Nothing is shared with other companies.
  • We never ask for your e-mail, your real name or your age.
  • We never store your IP address, only a scrambled fingerprint of it.
  • Everything is deleted automatically after the times listed below.
  • You can download your data or delete your account yourself, at any time.

Who is responsible

The data controller is ondiscute, reachable at hello@ondiscute.com . See also the legal notice.

What we keep, why, and for how long

  • Your session cookie: a random identifier, your nickname, when you accepted the charter, your language and, for members, your account number. It is encrypted and expires after 30 days, or when you ask this device to forget you (below). Why: to run the chat (contract).
  • Salon messages, with nickname, time and IP fingerprint. Deleted after 30 days. Why: to run the chat (contract).
  • The moderation log: salon messages (including deleted or refused ones, refused ones shortened), arrivals, kicks, bans, reports, alerts, forum posts, and who sent a private message to whom and when — never the text of private messages. Deleted after 1 year. Why: to handle abuse and answer lawful requests (legitimate interest, legal obligation).
  • A fingerprint of your IP address: a keyed hash, never the address itself. It is pseudonymous data, not anonymous: with the key it can be matched to an address you give us. Stored with messages, the log, bans and blocks, and with salons you open (forgotten 30 days after the salon closes). Why: to limit spam and enforce bans and blocks (legitimate interest).
  • Reports, with a copy of the reported message. Kept until handled (at most 1 year), then 180 days. Why: moderation (legitimate interest).
  • Bans: until they end; a ban without an end date is lifted after 3 years. Personal blocks (🆘 button): 90 days. Why: safety (legitimate interest).
  • Member accounts: nickname, password (hashed, never readable), avatar, the few words you write about yourself, preferences, directory and message settings, last visit, contacts. Kept while the account exists. Why: the member service (contract).
  • Private messages between members. A conversation is deleted 1 year after its last message; you can delete a message you sent at any time. Today they are stored on our server unencrypted end to end; moderators only read a message when it is reported. Why: the member service (contract).
  • Forum posts: kept while your account exists; you can delete each of yours. The public moderation log is kept 1 year.
  • Partner sites and rendez-vous you add: kept while your account exists.
  • Old partner widgets: the name of the site that shows the widget (not visitors), deleted 1 year after it was last seen.
  • IRC: the same rules as the salons.
  • Server logs (pages requested, errors; no message text, no form contents): 14 days.

Nothing is stored in your browser apart from the session cookie (no local storage). The cookie is strictly necessary, so there is no cookie banner. The chat filter automatically hides phone numbers and e-mail addresses and refuses some words; it has no legal or similar effect on you, and a moderator can review it.

Forget me on this device removes the session cookie at once.

Deleting your account

From the members' area. Your account disappears at once; log in again within 30 days to cancel. After that your profile, contacts and private messages (both sides) are erased, your forum posts are signed “former member”, your nickname is freed, and the moderation log keeps its entries without your nickname until they expire.

Who receives your data

Nobody, except: the moderation team; the authorities, on a lawful request or when the law requires us to report (for example child sexual abuse); and you. Data stays in the United Kingdom and the European Union.

Your rights

You can ask to access, correct, delete or receive a copy of your data, to restrict its use, or object to it. Members can do most of this themselves in the members' area (Download my data, Delete my account). Guests: tell us your nickname, the salon and roughly when, so we can find what concerns you — write to hello@ondiscute.com . We answer within one month. We may keep what we must keep by law, or to handle a report.

You can complain to the ICO (United Kingdom), the CNIL (France), or the data protection authority where you live.