Privacy Policy | ChatSpace Live

1. The "Host" vs. "ChatSpace Live"

It is critical to understand the architecture of ChatSpace before using our software.

ChatSpace Live (Us): We develop the software engine and maintain the "Master Server" for hub discovery. We are based in the United Kingdom.
The Host (You): When you run ChatSpace Server.exe, you become a data controller. You are hosting the database, chat logs, and user images on your own hardware.

Important: ChatSpace Live does not have access to your local database (`chatspace-pro-master.db`). We cannot read your private messages, view your user passwords, or access your file transfers.

2. Data Collection & Storage

2.1 Data Stored by YOU (On Your Server)

If you host a server, the software will generate a SQLite database on your local machine containing:

Data Type	Purpose	Storage Method
User IP Addresses	Ban enforcement & moderation.	Local SQLite DB (Unencrypted)
Chat History	Providing context to joining users.	Local Memory / SQLite DB
Passwords	User authentication.	Bcrypt Hashed (Encrypted)
Avatars	Visual identity.	Local File System (`/avatars` folder)

2.2 Data Collected by US (ChatSpace Live)

When you use the "Hub Talk" feature or enable "Public Listing," your server transmits minimal heartbeat data to our Master Server (`jump.chatspace.live`). This includes:

Your Server Name & Description.
Your Public IP Address & Port (for connection purposes).
Current User Count (for statistics).
Software Version (for update checks).

3. Third-Party Integrations

ChatSpace Pro includes optional integrations that interact with third-party APIs.

3.1 GIPHY Integration

If you configure a GIPHY API Key in your server settings, search queries typed by your users into the GIF bar are sent directly to GIPHY. Please refer to GIPHY's Privacy Policy for how they handle search data.

3.2 Direct Peer-to-Peer (WebRTC)

Voice, Video, and File Sharing features use WebRTC technology. This establishes a direct connection between users. While the signaling data passes through your server, the actual media stream acts Peer-to-Peer and is not recorded by ChatSpace Live.

4. UK GDPR & Your Rights

Under the Data Protection Act 2018 and UK GDPR, users have specific rights regarding their personal data. As a software provider, ChatSpace Live facilitates these rights through built-in tools:

Right to Erasure ("Right to be Forgotten")

Server Hosts can permanently delete a user account via the Dashboard. This action purges the username, password hash, and IP records from the local `chatspace-pro-master.db` immediately.

Right to Access

Users may request a copy of their profile data. The software provides an API endpoint allowing users to view their stored profile quotes, email (if provided), and location status.

5. Security Measures

We employ industry-standard security practices within the software architecture:

Password Hashing: All user passwords are salted and hashed using bcrypt (10 rounds) before storage. They cannot be reversed to plain text.
Token Authentication: We use encrypted passovers for session management, preventing the need to store session IDs in a vulnerable manner.
Input Sanitization: The server engine actively sanitizes inputs to prevent Cross-Site Scripting (XSS) attacks within the chat environment.

6. Contact Us

If you have questions about this policy, or if you are a user seeking to report a server that is misusing your data in violation of our Terms, please contact our Data Protection Officer:

[email protected]

Postal Address: ChatSpace Live, TechHub London, Old Street, EC1V 9NR, United Kingdom.