Privacy Policy

1. Introduction

Welcome to Nightvent ("we," "our," or "us"). We are committed to protecting your privacy and ensuring a safe, anonymous chat experience. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform at nightvent.app.

By using Nightvent, you agree to the terms outlined in this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address – Used for account verification, login, and important service communications
• Password – Stored securely using industry-standard hashing (we never store passwords in plain text)
• Gender – Used for matching preferences to connect you with compatible chat partners

2.2 Usage Data

To ensure service quality and security, we collect:

• IP address – For security, fraud prevention, and abuse detection
• Device information – Browser type, operating system, and device identifiers
• Connection timestamps – When you connect and disconnect from our service
• Match metadata – Match ID, anonymous aliases, match duration, and timestamps

2.3 Chat Data

We only store:

• Match metadata – Match ID, anonymous aliases (e.g., "User-1234"), timestamps, and duration
• Report metadata – If you report a user, we store the reporter ID, reported user ID, reason, and timestamp (but NOT the chat content)

3. How We Use Your Information

We use your information solely to provide and improve our services:

• Facilitate anonymous matching – Connect you with random chat partners based on your gender preferences
• Account verification – Send one-time password (OTP) codes to your email via our email service provider (Brevo)
• Security and abuse prevention – Detect spam, harassment, and policy violations to maintain a safe community
• Service improvement – Analyze aggregated, anonymized usage statistics to enhance user experience
• Enforce community guidelines – Investigate reports and take action against users who violate our Terms of Service
• Legal compliance – Comply with applicable laws and legal obligations

4. Data Storage & Security

We take data security seriously and implement industry-standard measures to protect your information:

• Encryption in transit – All data is encrypted using HTTPS (for web requests) and WSS (for WebSocket connections)
• Secure authentication – Passwords are hashed using strong cryptographic algorithms; we use token-based authentication (access tokens + refresh tokens)
• Server location – Our servers are hosted in Indonesia
• Access controls – Only authorized personnel have access to user data, and access is logged for security auditing

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our safeguards.

5. Data Retention & Deletion

5.1 Chat Messages

Deleted immediately. Chat messages are never stored in our database. They exist only in memory during transmission and are permanently deleted when the chat ends.

5.2 Account Data

Your email, hashed password, and gender are stored as long as your account is active. You may delete your account at any time, which will permanently remove all associated data from our systems.

5.3 Logs & Metadata

Server logs (IP addresses, connection timestamps) and match metadata are retained for 30 days for security, abuse prevention, and troubleshooting purposes. After 30 days, these logs are automatically purged.

5.4 Your Right to Deletion

You have the right to request deletion of your account and all associated data. To delete your account, contact us at support@nightvent.app. We will process your request within 30 days.

6. Anonymity & Identity Protection

Nightvent is built on the principle of true anonymity:

• Anonymous aliases – Each match generates new random aliases (e.g., "User-1234" and "User-5678"). Your real identity is never revealed.
• No persistent identity – Aliases reset with every new match. Your chat partner cannot link you to previous conversations.
• No chat history – Since messages are not stored, there is no way to retrieve past conversations.
• No profile information – Your chat partner cannot see your email, gender, or any personal details.

7. Third-Party Services

We use the following third-party services to operate Nightvent:

7.1 Email Service Provider (Brevo)

We use Brevo (formerly Sendinblue) to send transactional emails, including OTP verification codes. Brevo processes your email address solely for the purpose of delivering emails on our behalf. For more information, see Brevo's Privacy Policy.

7.2 Analytics (Vercel Analytics)

We use Vercel Analytics to understand how users interact with our platform. Vercel Analytics is privacy-friendly and does not use cookies or track personal information. It collects only aggregated, anonymized usage statistics (e.g., page views, bounce rates).

7.3 Hosting Provider

Our application is hosted on servers located in Indonesia. The hosting provider has access to server infrastructure but does not have access to user data.

We do NOT:

• Use third-party advertising networks
• Share your data with advertisers
• Use cross-site tracking cookies
• Sell your personal information to third parties

8. Cookies & Local Storage

Nightvent uses localStorage (a browser-based storage mechanism) to store your authentication tokens (access token and refresh token). This allows you to stay logged in across sessions without having to re-enter your credentials.

We do NOT use:

• Third-party cookies
• Advertising cookies
• Cross-site tracking technologies

9. Your Privacy Rights

Depending on your location, you may have the following rights under data protection laws (such as GDPR in the EU or CCPA in California):

9.1 Right to Access

You can request a copy of the personal data we hold about you.

9.2 Right to Rectification

You can request that we correct any inaccurate or incomplete data.

9.3 Right to Deletion

You can request that we delete your account and all associated data.

9.4 Right to Data Portability

You can request a copy of your data in a machine-readable format.

9.5 Right to Object

You can object to the processing of your data for certain purposes (e.g., marketing, which we do not currently engage in).

To exercise any of these rights, contact us at support@nightvent.app. We will respond to your request within 30 days.

10. Reports & Safety

Nightvent provides a reporting system to maintain a safe and respectful community. If you encounter harassment, abuse, or inappropriate behavior, you can report the user.

10.1 What We Collect in Reports

When you submit a report, we collect:

• Reporter's user ID (to prevent spam reports)
• Reported user's ID
• Reason for the report
• Timestamp of the report

Important: We do NOT collect or store chat message content in reports. Since messages are never saved, we cannot retrieve conversation history.

10.2 Enforcement Actions

Based on reports and investigations, we may take actions including warnings, temporary suspension, or permanent account termination for users who violate our Terms of Service.

11. Age Requirements

We do not knowingly collect or solicit personal information from anyone under the age of 18. If we learn that we have collected personal information from a user under 18, we will delete that account and information as quickly as possible. If you believe we have inadvertently collected data from a minor, please contact us immediately at support@nightvent.app.

12. Future Monetization

Nightvent may introduce premium subscription features in the future. However, we will never display third-party advertisements or sell your personal data to advertisers. Any premium features will be opt-in and transparent.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email (if you have an account)
• Display an in-app notice when you next log in

Your continued use of Nightvent after changes are posted constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at:

15. Summary of Key Privacy Features