Privacy Policy
Last updated: 14 October 2026
In short: we do not ask who you are. We create a random anonymous ID for your browser, use your self-reported gender only for matching, delete chat messages about 60 minutes after a chat ends, and keep abuse reports for 30 days. Our service providers (Supabase for the database and sign-in, Cloudflare for hosting) still process technical data such as IP addresses, and anything you type in a chat can identify you.
1. Who runs this site
MUST CRUSH is operated by [OPERATOR NAME], [COUNTRY]. You can reach us at contact@example.com.
2. What we do not collect
We do not ask for or store your name, email address, phone number, photos, contacts or precise location. There is no public profile or username. We do not use analytics or tracking tools.
3. What we process and why
- Anonymous identifier. When you first press Start Chat, Supabase Auth creates a random ID for your browser (anonymous sign-in). It lets the server know that two requests come from the same browser. It is not linked to your real identity, and the other person never sees it.
- Self-reported gender. Used only to pair you with someone of the opposite gender. It is not verified.
- Age confirmation. We record the time you confirmed you are at least 18. We do not collect your date of birth.
- Matching state. Whether you are idle, searching or in a chat, and when you last checked in, so the server can pair people fairly and remove people who left.
- Chat messages. The text you send, the time it was sent, and whether it was written by you or the other participant. Messages are stored so they can be delivered in real time and are deleted on the schedule below.
- Chat records. When a chat started and ended, why it ended, and "last active" timestamps used to show whether the other person is still there.
- Safety data. The list of anonymous IDs you have blocked or reported (so you are not matched again), reports made about your ID, and any temporary pause on matching.
- Abuse-prevention counters. How many requests your browser made recently, to enforce rate limits.
- Technical data handled by our providers. Like any website, our hosting and database providers process your IP address, browser type and request logs to deliver the service and protect it from abuse. If bot protection is enabled, Cloudflare Turnstile checks your browser before the anonymous ID is created, to block automated traffic.
4. How long we keep it
- Chat messages and chat records: deleted automatically about 60 minutes after the chat ends (the cleanup job runs every 5 minutes). Chats end when a participant leaves, after about 2 minutes without any sign of a participant, or after at most 3 hours.
- Abuse reports (including the excerpt of up to 30 recent messages attached to a report): deleted after 30 days.
- Your anonymous ID and its matching, safety and rate-limit records: deleted after 30 days without activity (or after 7 days if you never started a chat).
- Server logs kept by our providers follow their own retention periods.
5. Reports and moderation
If someone reports you, or you report someone, the report contains the reason, optional details, the anonymous IDs of both people and an excerpt of recent messages from that chat. Reports are visible only to people authorised to moderate the service. If you report someone, they are not told who reported them.
6. Cookies and browser storage
The site stores a few items in your browser that are needed for it to work: the anonymous sign-in session (localStorage, set by Supabase), your language and last selected gender (localStorage), and your age confirmation for the current visit (sessionStorage). You can remove them at any time by clearing this site's data in your browser; you will then get a new anonymous ID.
Advertising. If advertising is enabled, Google AdSense may set cookies or use similar technologies on informational pages (never on the chat page) to show and measure ads, and may personalise ads. In regions where consent is required, a consent message is shown before such technologies are used. Learn more in How Google uses information from sites that use its services.
7. Service providers
We rely on Supabase, Inc. (database, anonymous sign-in and live updates; our database is hosted in the Seoul, South Korea region) and Cloudflare, Inc. (website hosting and, if enabled, Turnstile bot protection), and on Google AdSense if advertising is enabled. These providers process data on our behalf and may process it in countries other than yours. We do not sell your data.
8. How anonymous is it?
We never show your anonymous ID, IP address or any account details to the person you chat with — they see only "Stranger". However, no online service can promise complete anonymity or perfect security. Anything you write can reveal who you are, and the other person could copy or screenshot the conversation. Please follow the Safety Rules.
9. Children
The service is only for people aged 18 or older and is not directed at children. If you believe a minor is using the site, please report the chat or contact us.
10. Your choices and rights
You can stop using the site at any time and clear your browser data to remove your anonymous ID from your device. Because we do not know who you are, we can only act on a request (for example, to access or delete data) if you can give us details that let us find the related records, such as the time of a specific chat. Depending on where you live you may have additional rights under data-protection law, including the right to complain to your local data-protection authority.
11. Changes
We may update this policy when the service changes. The date at the top shows the latest version.