Privacy Policy

Last updated: May 18, 2025 — Version 1.0

This Privacy Policy explains how domogle ("we", "us", or "our") collects, uses, and protects your personal data when you use our Service at domogle.efm.lol. We are committed to compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

1. Data Controller

The data controller for this Service is the operator of domogle.efm.lol. For privacy inquiries, contact us at boysgunsmoke@gmail.com.

2. Data We Collect

We collect the following categories of personal data:

• Account Information (registered users): email address, username, hashed password, OAuth provider details (Google/Discord), and profile avatar URL
• Connection Logs: IP address, browser user agent, connection timestamps, and session duration — collected for every connection to the Service
• Moderation Data: If a user is reported, we capture and store a screenshot of the reported user's video feed, the reporter's IP address, the reported user's IP address, and the reason for the report
• Consent Logs: A record that you have accepted these terms, including timestamp and IP address
• Technical Data: Standard server logs including error logs and access logs

We do not store video or audio streams. All video and audio is transmitted peer-to-peer (WebRTC) directly between users and never passes through our servers. Screenshots are only captured at the moment a report is submitted.

3. How We Use Your Data

• Service provision: To match you with other users and enable video chat
• Safety and moderation: To investigate reports of abuse, ban bad actors, and protect users
• Security: To detect and prevent fraud, abuse, and rate-limit excessive connections
• Legal compliance: To comply with applicable laws, court orders, or law enforcement requests

We do not sell your personal data. We do not use your data for advertising. We do not share your data with third parties except as required by law.

4. Legal Basis for Processing (GDPR)

• Contract (Article 6(1)(b)): Processing necessary to provide the Service you requested (account creation, session matching)
• Legitimate Interests (Article 6(1)(f)): Safety monitoring, moderation, fraud prevention, and abuse detection
• Consent (Article 6(1)(a)): Where you have explicitly consented, such as accepting these terms
• Legal Obligation (Article 6(1)(c)): Where we are required by law to process data

5. Data Retention

• Connection logs: Retained for 90 days, then automatically deleted
• Account data: Retained until account deletion is requested
• Moderation records (reports): Retained for 12 months or until the associated dispute is resolved, whichever is longer. Records related to banned users may be retained indefinitely
• Consent logs: Retained for 3 years as required by GDPR compliance records

6. Your Rights (GDPR / CCPA)

Depending on your location, you may have the following rights:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request that we restrict processing of your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Opt-Out (CCPA): California residents have the right to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at boysgunsmoke@gmail.com. We will respond within 30 days. We may need to verify your identity before processing requests.

7. Cookies and Local Storage

We use browser localStorage (not cookies) to store your authentication token and consent preference. No tracking cookies or third-party advertising cookies are used.

8. Third-Party Services

• Google STUN servers: Used to facilitate peer-to-peer connections. Google may receive your IP address as part of this process. See Google's privacy policy at google.com/privacy
• Google OAuth / Discord OAuth (optional): If you sign in with Google or Discord, we receive your profile information from that provider. Their respective privacy policies apply
• TURN relay (if configured): A third-party TURN server may relay your connection metadata (not video/audio content) to establish connections through restrictive firewalls

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted HTTPS connections, hashed passwords (bcrypt), JWT-based authentication, and restricted admin access. However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of material changes by updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact

For privacy-related inquiries, data requests, or complaints, contact: boysgunsmoke@gmail.com

If you are in the EU/EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.