Privacy policy

Audio is encrypted and goes straight between the two devices. If a direct connection isn't possible, it's relayed through MellowTalk's server (TURN). It stays encrypted there, so the server can't listen to it, and nothing is recorded.

Messages you send during a call pass through the server to the other person. They're never saved.

A random ID in a cookie (hid) is your account. We store only a one-way hash of it, so our database can't be used to sign in as you. Linked to it are a random username (like QuietOtter42), your settings, your 18+ confirmation, when you joined and were last seen, lifetime stats: calls, talk time, longest call, day streak, and the countries you've talked to, and how many calls you've had in the last 30 days (for the report rules below). The cookie is strictly necessary to run the service, so there's no cookie banner. It's renewed whenever you open the site and expires 2 years after your last visit (some browsers end it sooner), and an account nobody has used for 2 years is deleted along with everything linked to it.

Each visit stores when it started and ended, along with your IP address and browser identifier (user agent). These two are stored only as keyed hashes, which can't be turned back without a secret key that's kept separately. They help spot people who flood the service or dodge a ban. Otherwise your IP address is only held in memory while needed (rate limits, the relay), and it isn't written to logs.

Who talked to whom, when and for how long. Also each side's country (looked up from the IP address on the server itself, with no outside service), whether the call connected directly or through the relay, and how it ended. This powers your call history, call-backs, matching and abuse prevention.

Friendships, the nicknames you give friends, and messages between friends are stored on the server so they arrive even when the other person is offline. They aren't end-to-end encrypted. Messages are deleted after 14 days, and right away when either of you unfriends or blocks the other. Unanswered friend requests go after 30 days.

When you rate, report or block someone, that's stored with both accounts, plus the reason for a report. A block also keeps their country and, if you were friends, the name you knew them by, so your list of blocked people can show who's who. Reports are read by the operator and affect matching (see the house rules). Ratings are deleted 120 days after the call. Reports and blocks go when either account is deleted.

A number for each account, worked out every hour from the last 30 days of calls: how long they lasted, ratings, friend requests and call-backs you got, and whether people left your calls early, blocked or reported you. It isn't shown to anyone. It's being tested and doesn't affect matching yet. Later it will decide who gets matched with whom first, never whether you can use MellowTalk. It goes when the account is deleted.