Exit Zen
legalPage.connectionsToOrangchatUseEncryptedHttps
English
Connections to OrangChat use encrypted HTTPS or WSS transport. Passwords are hashed with Argon2id rather than stored as readable passwords. Cloud-hosted message attachments and stored OAuth credentials are encrypted before storage. We also use access controls, short-lived access tokens, refresh-token rotation, optional two-factor authentication, rate limits, and restricted service permissions.
433/3960 · 396
Review state
legalPage.consent
English
Consent:
7/100 · 8
Review state
legalPage.contentAndSocialData
English
Content and social data:
28/240 · 24
Review state
legalPage.contract
English
Contract:
7/100 · 9
Review state
legalPage.controllerContactParagraph
English
Oranges.LT, Lithuania, is the controller for personal data processed to provide OrangChat. For privacy questions or to exercise your rights, email {email}.
146/1550 · 155
Review state
legalPage.cookieAndLocalStoragePolicy
English
Cookie and Local Storage Policy
30/310 · 31
Review state
legalPage.cookiesWeUse
English
Cookies we use
22/140 · 14
Review state
legalPage.copyright
English
Copyright
7/100 · 9
Review state
legalPage.deletingAnAccountScrubsIdentifyingAccount
English
Deleting an account scrubs identifying account and profile fields and removes personal side records. Messages and necessary moderation records may remain under a deleted identity. You can delete all messages separately before deleting the account.
273/2470 · 247
Review state
legalPage.dependingOnTheFeatureAndDeployment
English
Depending on the feature and deployment configuration, data may be handled by:
80/780 · 78
Review state
legalPage.deviceData
English
Device data:
12/120 · 12
Review state
legalPage.directMessagesAndGroupDirectMessages
English
Direct messages and group direct messages are end-to-end encrypted once every participant has enrolled an encryption-capable device. Until then, the conversation is clearly labelled as plaintext. Server channels remain readable by OrangChat so their public history, search, moderation, and role-based access controls can work. Encrypted conversations keep message bodies, attachment keys, drafts, and search data on participating devices; OrangChat still processes delivery metadata such as participants, timestamps, and ciphertext sizes. No system is perfectly secure, so users should also protect their credentials and devices.
688/6290 · 629
Review state
legalPage.distributeMalwareStealCredentialsEvadeAccess
English
Distribute malware, steal credentials, evade access controls, or disrupt the service.
97/850 · 85
Review state
legalPage.doNotSellTransferShareOr
English
Do not sell, transfer, share, or impersonate another person through an account.
80/790 · 79
Review state
legalPage.effectiveDate
English
Effective {date}
15/160 · 16
Review state
legalPage.email
English
Email
5/100 · 5
Review state
legalPage.emailAddressUsernameDisplayNamePassword
English
email address, username, display name, password hash, OAuth login identifiers, profile fields, privacy preferences, and security settings.
142/1380 · 138
Review state
legalPage.enforcementMayIncludeWarningsContentRestrictions
English
Enforcement may include warnings, content restrictions, content removal, feature limits, suspension, termination, evidence preservation, or referral to authorities. We consider context, severity, intent, harm, history, and the risk of repetition.
258/2460 · 246
Review state
legalPage.evadeASuspensionBanRateLimit
English
Evade a suspension, ban, rate limit, moderation action, or technical restriction.
86/810 · 81
Review state
legalPage.exploitGroomEndangerOrSexualiseA
English
Exploit, groom, endanger, or sexualise a minor.
41/470 · 47
Review state