Privacy policy

• Account details from Google sign-in. We use Supabase to handle sign-in with Google. We store your email address, your name as provided by Google, and a unique user ID. Your email and name are never shown to other people.
• Your profile. The username and avatar you choose. These are shown to the people you are matched with. Avatars are generated by DiceBear, so your avatar image is loaded from api.dicebear.com.
• Matching and call records. To pair you with someone we keep queue entries, call rooms and who took part in each call, with timestamps and status. We use these to run matching, avoid pairing you with the same person again in a session, and keep the service safe.

• Your voice. Calls are peer-to-peer WebRTC audio, encrypted in transit. When a direct connection isn’t possible, audio is relayed through a TURN server (operated by Cloudflare) that forwards encrypted packets. We do not record or store call audio.
• Your chat messages. In-call text and photos are sent directly between the two browsers over an encrypted WebRTC data channel. They are not sent to or stored on our servers; a copy is kept in your own browser’s storage (IndexedDB) so the conversation survives a reload. Clearing your site data removes it. The other person can keep their own copy.

We show ads from Google AdSense on some pages (never during a live call). Google and its partners use cookies and similar technologies to serve ads, measure them, and, where permitted, personalise them based on your visits to this and other websites.

• Visitors in the European Economic Area, the UK and Switzerland are asked for consent through a Google-certified consent message before personalised ads or related cookies are used. You can change your choice at any time from the privacy link in that message.
• You can opt out of personalised advertising from Google at Google’s Ad Settings, or from many third-party vendors at aboutads.info.
• Learn how Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.

Apart from advertising, we use your browser’s storage only for things the app needs: keeping you signed in, your theme choice and your chat history.

• Supabase: authentication, database and realtime signalling.
• Cloudflare: hosting and TURN audio relay.
• Google: sign-in and advertising (AdSense).
• DiceBear: avatar images.

You can ask us for a copy of your data, to correct it, or to delete your account and the data linked to it. Depending on where you live you may have further rights under laws such as the GDPR or US state privacy laws, including the right to complain to your local data protection authority.

Questions or requests: hello@whislink.com.

Whislink is for adults aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a minor is using the service, please contact us.

We will update this page when our practices change and adjust the date at the top.