Privacy Policy

1. What we collect

What you give us

• Account details: your username, display name, email address and password. We store your password only in scrambled (hashed) form, so we can’t read it.
• Profile: your bio, profile photo and banner, if you add them.
• What you post and send: posts, replies, photos, likes, follows, direct messages, group chats and their names, and edits to any of these.
• Settings: who can call you, email digest and notification preferences, who you’ve blocked, and (for staff) which badges you hide.
• Things you send us: reports, appeals and contact form messages, including the email address you give for a reply.

What we collect as you use it

• Sign-ins: a record of each active sign-in (an ID and the time), and the IP address of your most recent sign-in, which replaces the one before.
• Live rooms and calls: who joined which room or call and when, while it’s happening, and a line in the conversation for each call (such as “Missed video call” or “Video call · 4:12”). We don’t record or store live video, call audio or video, or live room chat.
• Password resets: when a reset link was sent to you, and when it was used. The link itself is stored only in a scrambled form we can’t use, and stops working after one use or an hour (a day if our team sent it at your request).
• Notifications and push: the notifications you receive, and, if you turn on push notifications, the address your browser gives us for delivering them.
• Server logs: like most websites, our servers log requests (IP address, page, time and browser type) for security and troubleshooting. We also total them into daily page view and visitor counts for our own site statistics; only the totals are kept.
• Activity days: which days you used loungin.live (not what you did), so we can count active members.
• Moderation records: warnings, suspensions and the rule involved, if any are issued to your account.

We don’t use advertising or analytics trackers, and we don’t collect your location. Photos are re-saved on your device before upload, which strips the location data phones attach to photos.

2. How we use it

• To run loungin.live: create your account, show your profile and posts, deliver messages, connect live rooms and calls, and send notifications, push notifications and (if you keep them on) email digests.
• To keep people safe: review reports and appeals, enforce the Community Standards, limit spam and abuse, and block addresses used to evade bans.
• To keep the service secure and working, and to fix problems.
• To contact you about your account, such as confirming your email or replying to a message you sent us.
• To meet legal obligations.

We don’t sell your personal information, share it for advertising, or use it to build advertising profiles.

Sponsored posts: the feed can include cards marked “Sponsored,” which we choose and approve ourselves. They contain no third-party code. We count how many times each one is shown and clicked, but not who saw or clicked it. A sponsor’s own website has its own privacy policy.

3. Who can see what

• Other members can see your profile (name, username, photo, banner, bio, badges, join date, and who you follow and who follows you), your posts and replies, and what you show and say in live rooms you join. Your email address is never shown to members.
• Anyone with a shared live room link sees a preview with the room’s title and the host’s name and photo, even without signing in.
• Direct messages and group chats are seen by the people in the conversation. Calls are seen and heard by the people in the call.
• Moderators see reports, appeals, reported content and moderation records. They don’t see members’ email addresses or IP addresses.
• Admins also see account details such as email addresses and the last sign-in IP address, to protect accounts and enforce bans.
• Private messages aren’t shown in any staff tool. We access them only when the law requires it or to investigate a serious threat to someone’s safety.
• Legal requests: we may share information when the law requires it, or to protect people from serious harm.

4. Services we rely on

Some parts of loungin.live involve other companies. When they’re involved, your browser or our server contacts them, and they can see things like your IP address:

• Hosting: our servers are run by a hosting provider in the United States.
• Default profile pictures: if you haven’t uploaded a photo, your cartoon avatar is drawn by DiceBear (api.dicebear.com) from your username.
• Calls and live video: to find a connection between devices, your browser may contact a Google “STUN” server, which sees your IP address but not your audio or video.
• Push notifications: delivered by your browser’s push service (for example Google, Mozilla or Apple). The notification’s contents are encrypted on the way.
• Embedded media: when a post or message links to YouTube, TikTok, Instagram, Facebook, Vimeo or Spotify, the player shown comes from that service, which can see your IP address and set its own cookies under its own privacy policy.
• Link previews: when you share a link, our server (not your browser) visits that page to build the preview, so the site sees our server, not you.
• Email: sent from our own mail server; your email provider handles it once it arrives.

5. Cookies and storage

We use one cookie: the one that keeps you signed in. It lasts until you sign out, or until a year after your last visit. Your browser also keeps a few preferences on your device (such as notification sound and which live notices you’ve dismissed), and the app saves copies of its own files so it loads quickly. We don’t use advertising or analytics cookies. Embedded media from other services may set their own cookies.

6. How long we keep it

• Your account and content: until you delete them or your account.
• Sign-ins: each sign-in record ends when you sign out, when your password changes, or a year after that device’s last visit.
• Notifications: deleted after 60 days.
• Server logs: rotated out after about two weeks.
• Backups: copies of our database are kept for up to 30 days, then deleted. Something you delete can remain in a backup until then.
• Reports, appeals, contact messages and moderation records: as long as needed to handle them and keep a record of decisions. Records needed to stop banned people returning (such as blocked addresses) can outlast an account.

7. Your choices and rights

• See and change your information: edit your profile, photo, banner and settings any time in Edit Profile.
• Delete things: delete your posts, replies and messages, or your whole account.
• Control contact: block people, limit or turn off calls, turn off email digests, and turn push notifications on or off.
• Ask us: depending on where you live, you may have the right to ask for a copy of your information, to correct it, to delete it, or to object to how we use it. Send requests through the contact form (choose “Privacy request”). We’ll confirm the account is yours and respond within 30 days. We won’t treat you differently for making a request.

8. Deleting your account

Go to your profile, choose Edit Profile, then Delete my account, and confirm with your password. Right away, we delete your profile, photo and banner; your posts and the replies on them; your replies elsewhere; your likes and follows; your direct conversations (for both people in them); the messages you sent in groups; your photos; your notifications, blocks and settings; and your moderation record. Your username becomes available again. Backup copies are deleted within 30 days.

Reports other people filed about your account may be kept as safety records, and blocked network addresses stay blocked.

9. Security

loungin.live uses encrypted connections (HTTPS), stores passwords only in hashed form, keeps your sign-in cookie out of reach of page scripts, and limits who on our team can see what. Messages are stored on our servers and aren’t end-to-end encrypted. No system is perfectly secure; if we learn of a breach that affects your information, we’ll tell you as the law requires.

10. Children

loungin.live isn’t directed to children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 has an account, tell us through the contact form and we’ll delete it.

11. Changes and contact

We may update this policy. When a change is significant, we’ll let members know on the site before it takes effect. Questions or requests: use the contact form.