Privacy Policy

In Short

OmegleWeb is an anonymous video chat. We do not record your video or audio streams, and we do not store your conversations. At the same time, the service is actively moderated: individual frames from your camera are automatically analyzed on our servers, and the most recent frame may be visible to a moderator. We do not sell your data. Below is a list of what we collect.

Who We Are

OmegleWeb (omegleweb.cam) is operated by Rindforge LLC, a company incorporated in Wyoming, USA, which is the data controller for the personal data described in this policy. The service is operated from the United States; user data is stored on our own servers in the European Union (Finland).

Privacy requests: [email protected]. Legal notices and law-enforcement requests (see our Law Enforcement Request Policy): [email protected].

One Platform, Several Sites

OmegleWeb runs on the same platform and shares its chat partners with our other sites: lemonchat.app, omegle.fm and chatoo.pl. When you search for a partner, you may be matched with a user of any of these sites, and they may be matched with you. The same rules, the same moderation and this policy apply on all of them, Rindforge LLC is the data controller for all of them, and bans and reports take effect on all of them at once.

Information We Collect

• —Account. If you sign in with Google, we receive and store your account identifier, email address, profile name and avatar link. If you register anonymously — only a nickname and a password hash (we never see the password itself). For all accounts we also store your declared gender, country (derived from your IP address), sign-up date and last-visit date.
• —Technical data. The IP addresses of your recent connections (the last 10 distinct addresses, with dates) and the public IP addresses observed while your video connection is being set up, browser and device type, technical characteristics of your camera and microphone, and log files (see below).
• —Usage data. Chat counter, coin balance and Boost status, purchase history (without payment details), bans and their reasons, reports (who reported whom and when — without any content), internal service flags.

Video Chat and Moderation

Your stream travels directly between you and your chat partner over an encrypted WebRTC connection. We do not record or store video or audio streams.

What your chat partner sees. Besides your video and audio, your partner is shown your declared gender and your country (derived from your IP address and displayed as a flag). Users with an active Boost can hide their country in the chat settings. We never send your nickname, email address or IP address to your partner, although a direct peer-to-peer connection can still reveal your IP address — see Your Chat Partners below.

Your microphone is used for one purpose only — to carry live audio to the person you are talking to. Audio is never recorded, never analyzed and never sent to our servers: moderation looks at video frames alone. Camera and microphone access can be revoked at any time in your browser or device settings, though a video chat cannot run without them.

For safety, while you are in a video chat, a single frame from your camera is periodically captured and sent to our server, where it is automatically checked for compliance with our rules — including prohibited content and a face-based estimate of gender and age. All analysis runs on our own servers; frames are never shared with third-party services.

What is kept:

• —The most recent frame — available to moderators in the moderation panel. Every new frame overwrites the previous one, older entries are evicted automatically, and the frame is deleted when an account is banned.
• —Anonymized analysis results — recent estimates of the form "gender + age group + timestamp" (not photographs).

If the system determines that a user may be under 18, the account is banned.

Text Messages

Conversations are not stored — neither on our servers nor in your browser. Messages are checked by an automatic real-time filter (in server memory, within the current session only). Individual messages may be kept without any link to their author as anonymized samples used to tune the filters.

Reports

Snapshots of your recent chat partners shown in the report dialog are created and stored only in your browser and are cleared when the page reloads — they are never uploaded to our server. A report itself records only the pair of user identifiers and a timestamp.

How We Use Your Information

• —To run the service and match you with chat partners — performance of our agreement with you.
• —Moderation and abuse prevention — our legitimate interest.
• —Crediting purchases and premium features — performance of our agreement.
• —Push notifications — only with your consent.
• —Traffic analytics and service improvement.

Cookies and Local Storage

We use a login session cookie (7 days), the Cloudflare Turnstile anti-bot check, settings stored in localStorage, and a local list of your recent chat partners used for reports (cleared on reload). Traffic statistics are collected without cookies by a self-hosted analytics tool (Plausible) running on our own servers.

Do Not Track and Global Privacy Control. We do not currently respond to these browser signals: our analytics sets no cookies and does not follow you across other sites, and we do not sell personal data, so there is nothing for the signals to switch off.

Log Files

As is true of most websites, we gather certain information automatically and store it in log files. This information includes IP addresses, browser type, the pages and resources requested, date and time stamps, and error diagnostics.

For video chats, the log files also record each chat session: the identifiers of both participants, their IP addresses and countries, the site each of them was using, the start and end time of the chat, and whether the session was reported. What was said or shown in the chat is never logged.

We use log files to keep the service running, to investigate abuse, fraud and ban evasion, and to respond to lawful requests from authorities. Technical server logs are kept for up to 30 days and chat session records for up to 30 days; both are then deleted automatically.

Third-Party Services

• —Cloudflare — site protection, anti-bot checks and video relay when a direct connection is impossible. Handles site traffic; relayed video passes through encrypted and is not recorded.
• —Google — account sign-in (standard OAuth).
• —Google Play (Android app only) — processes in-app purchases. We send Google the purchase token to confirm the payment and receive back its status and order number. Your payment details stay with Google and never reach us.
• —ZeroCryptoPay (website only) — cryptocurrency payments. Receives the amount and order number; your payment details never reach us — we only store a transaction identifier.
• —Your browser's push service — notification delivery (subscription endpoint).

We do not sell personal data. We do not share it for targeted advertising.

When We Disclose Personal Data

We disclose personal data only in the following cases:

• —Service providers listed above — only the data they need to perform their function for us.
• —Legal requirements — to comply with a law, court order, subpoena or other lawful request from a public authority, including law enforcement. Where the law requires it, we preserve the relevant evidence and report child sexual abuse material to NCMEC or the competent national authority. How we handle such requests — what data exists, preservation, emergencies — is described in our Law Enforcement Request Policy.
• —Enforcement and safety — to enforce our Terms, investigate fraud, abuse or security incidents, and protect the rights, property or safety of Rindforge LLC, our users or others.
• —Business transfers — if Rindforge LLC is involved in a merger, acquisition, reorganization, bankruptcy or sale of all or part of its assets, personal data may be transferred to the successor, which will remain bound by this policy or will notify you of any changes.
• —Aggregated statistics that do not identify anyone (for example, visitor counts by country) — without restriction.

Your Chat Partners

Video travels directly between chat partners. As in any peer-to-peer service, a technically skilled partner may be able to see your IP address. Some connections go through a relay, which hides the address, but this is not guaranteed.

We do not record chats, but we cannot control what other users do on their side: your partner may capture your video or audio with screen-recording tools, and anything you show or say may be seen by someone other than the person you think you are talking to. Do not disclose your name, address, contact details or other personal information to strangers, and report anyone who breaks our rules.

Security

Traffic between your device and our servers is encrypted (TLS), and video streams are encrypted between the two participants (WebRTC) — a relay, when used, forwards them without being able to read them. Passwords are stored only as bcrypt hashes, and payment details never reach us. Data is stored on our own servers in the European Union, and access to it is limited to the operator and moderators, who see only what this policy describes. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If you believe your data has been compromised, or you have found a vulnerability, write to [email protected].

Data Retention

• —Profile — for as long as the account exists.
• —Moderation frame — until the next frame, automatic eviction, or a ban.
• —Face analysis results — a rolling window of recent estimates.
• —Temporary anti-abuse IP records — up to 7 days.
• —Technical server logs — up to 30 days.
• —Chat session records — up to 30 days.
• —Reports, bans, IP blocks, identifiers of devices linked to abuse, and payment records — indefinitely (safety and accounting).
• —Login session — 7 days.

Account Deletion

You can delete your account in the settings: sign-in is blocked and the profile is deactivated. Records needed to prevent abuse (bans, reports, service flags, payment history) are retained — this is our legitimate interest.

Age Requirement

The service is intended only for persons aged 18 or older. We do not knowingly collect personal data from anyone under 18. Where the law of your jurisdiction requires it, we may ask you to confirm your age or complete an age-assurance check before using the service.

If we learn that an account belongs to a person under 18, the account is banned and its moderation frame is deleted. If you believe we hold data about a person under 18, write to [email protected] and we will delete it, keeping only the minimal record needed to keep the account and its device blocked.

Your Rights

You can request access to, correction of, or deletion of your data at [email protected]. EU residents also have the right to lodge a complaint with a supervisory authority.

U.S. State Privacy Rights

Residents of California, Colorado, Connecticut, Texas, Virginia and other U.S. states with comprehensive privacy laws may, to the extent those laws apply to us, have the right to:

• —confirm whether we process their personal data and obtain a copy of it;
• —correct inaccurate personal data and delete personal data;
• —receive their personal data in a portable format;
• —opt out of the sale of personal data, of its sharing for targeted advertising, and of profiling that produces legal or similarly significant effects — we do none of these;
• —not be discriminated against for exercising these rights.

To exercise these rights, write to [email protected]. We verify requests using the data we already hold (for example, by asking you to write from the email address linked to your account) and reply within the time the applicable law allows. If we refuse a request, you may appeal by replying to our decision or writing to [email protected]. Nevada residents: we do not sell covered information as defined in Nevada law.