Privacy Policy

1. Introduction

AroCall ("we", "us", or "our") operates arocall.me, a random voice, text, and group chat platform designed to connect adults aged 18 and above worldwide. We are committed to protecting user privacy and operating in compliance with applicable data protection laws including GDPR (European Union), CCPA (California), and COPPA (United States — Children's Online Privacy Protection Act).

This Privacy Policy explains what information we collect, how we use it, how long we retain it, and your rights regarding your data.

2. Age Requirement & COPPA Compliance

AroCall is strictly intended for users who are 18 years of age or older.

COPPA Statement: AroCall does not knowingly collect personal information from children under 13 years of age. Our Service is directed exclusively at adults (18+). If we discover that we have inadvertently collected personal information from a child under 13, we will delete such information immediately from our records.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at contact@arocall.me. We will take immediate action to verify and delete the information.

Age Verification: All users must affirmatively confirm they are 18 years or older before accessing chat features. This confirmation is displayed prominently at the entrance to all chat pages.

3. Information We Collect

3a. Information You Provide Voluntarily (Stored in Your Browser Only)

The following preferences are stored exclusively in your browser's localStorage — they are never transmitted to or stored on our servers:

Display name (optional, not verified, not linked to identity)
Language and country preferences (for matching only)
Interest tags (for matching only)
Mood/conversation preferences
Theme preference (dark/light mode)

3b. Information Collected Automatically

Browser type and version — used for technical compatibility
Device type (mobile/desktop) — used for UI optimization
Anonymous session token — randomly generated per session, not linked to any identity, deleted when session ends
Device fingerprint hash — a one-way encrypted hash used solely for ban enforcement; cannot be reverse-engineered to identify you
Report metadata — if you submit a report, the session timestamp and report category are retained for safety review (not your identity)

3c. WebRTC & Peer-to-Peer Communication Data

Important — How WebRTC Works: AroCall uses WebRTC (Web Real-Time Communication) technology for voice, video, and peer-to-peer text sessions. During WebRTC connection setup, our signaling server temporarily processes connection metadata (ICE candidates) to establish a direct peer-to-peer connection between two users.

IP addresses are temporarily processed by STUN/TURN servers during connection setup but are NOT stored or logged by AroCall.
Audio and voice data flows directly peer-to-peer between users. AroCall servers never receive, process, or store your audio.
Text chat messages within a session are relayed through our signaling server in real-time but are never stored or logged after delivery.
All session communication metadata is permanently deleted when the session ends.

3d. Information We Do NOT Collect

Email addresses
Phone numbers
Real names or government identity documents
Permanent IP address logs
Recordings of voice, video, or text conversations
Social media profiles or accounts
Payment information (the Service is free)

4. How We Use Information

To match you with compatible conversation partners based on your in-browser preferences
To provide and improve our chat and group room features
To enforce our community guidelines and Terms of Service
To prevent abuse, spam, and ban evasion via device fingerprint hashing
To investigate reports of harmful content or policy violations
To comply with legal obligations and law enforcement requests
To serve contextual advertisements via Google AdSense (see Section 6)

5. Data Retention Periods

Data Type	Retention Period
Active session token	Deleted immediately on session end
Voice/text conversation data	Never stored — real-time only
WebRTC signaling metadata	Deleted immediately on session end
User-reported session metadata	Up to 90 days (for safety review & law enforcement)
Device fingerprint ban records	Up to 2 years (for ban enforcement)
Browser localStorage preferences	Until user clears browser data — stored on your device only

6. Third-Party Services & Advertising

We use the following trusted third-party services:

Google AdSense: We display advertisements served by Google AdSense. Google uses cookies to serve ads based on a user's prior visits to our website or other sites. Users may opt out of personalized advertising by visiting Google Ads Settings or aboutads.info.
Cloudflare: For web hosting, DDoS protection, and CDN delivery. Cloudflare's privacy policy applies to data processed through their infrastructure.
Google Fonts: For web typography. Font files are served from Google's CDN.
STUN/TURN Servers (WebRTC): Third-party STUN/TURN servers are used to establish peer-to-peer connections. These servers process connection metadata only (not audio/video content) and do not log this data on our behalf.

7. Cookies & Local Storage

AroCall uses browser localStorage (not traditional cookies) to save your chat preferences locally on your device. This data never leaves your device and is not transmitted to our servers.

Third-party cookies: Google AdSense and Google Fonts may set third-party cookies. For European Economic Area (EEA) and UK users, cookie consent is obtained in compliance with the EU User Consent Policy and GDPR before any advertising cookies are set.

You can clear all locally stored preferences at any time by clearing your browser's cache and localStorage data.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of Access: Request information about what data we hold about you
Right to Deletion: Request deletion of data we hold (note: most data is never stored)
Right to Object: Object to processing of your data
CCPA Rights (California): California residents have additional rights under the California Consumer Privacy Act including the right to know, right to delete, and right to opt-out of data selling (we do not sell personal data)
GDPR Rights (EU/UK): EU and UK residents have rights under GDPR including data portability and the right to lodge a complaint with your local Data Protection Authority

To exercise any of these rights, contact us at contact@arocall.me.

9. Child Safety & CSAM Reporting

AroCall has zero tolerance for child sexual abuse material (CSAM) or any content involving the exploitation of minors. Any discovered CSAM is immediately:

Removed from the platform
Reported to the National Center for Missing & Exploited Children (NCMEC) CyberTipline
Reported to relevant law enforcement authorities
Used to permanently ban the responsible user

For child safety concerns, contact us immediately at contact@arocall.me with the subject "Child Safety Report".

10. Data Security

We implement the following security measures to protect data:

All data in transit is encrypted via HTTPS/TLS 1.3
WebRTC audio/video connections use DTLS/SRTP encryption end-to-end
Our infrastructure is protected by Cloudflare's enterprise-grade DDoS protection
Access to server infrastructure is restricted to authorized personnel only
No sensitive personal data is stored on our servers

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

For any questions, concerns, or data rights requests related to this Privacy Policy:

AroCall Trust & Privacy Team

Email: contact@arocall.me

We aim to respond to all privacy-related enquiries within 72 hours. For urgent child safety concerns, please also contact your local law enforcement or call the NCMEC hotline at 1-800-843-5678.