Privacy Policy

1. About this policy

This policy explains what information KVB Chat collects when you use chat.kvb.gg, why we collect it, how long we keep it, and the choices you have. We wrote it in plain language. If anything is unclear, contact the address listed at the bottom.

2. Information you give us

• Account details. Email address, chosen username, optional display name, and a hashed password. Passwords are stored using bcrypt with a strong work factor and are never visible to staff.
• Profile content. Avatar, banner, bio, pronouns, and custom status text or emoji that you choose to set.
• Messages and attachments. Anything you post in channels, direct messages, or support tickets, including images, files, reactions, replies, and pinned content.
• Support tickets. The full transcript of any ticket you open, retained as a permanent record so staff can reference past issues.

3. Information we collect automatically

• Connection data. Your IP address, browser type, and approximate region. We use this for rate limiting, abuse detection, and the security audit log.
• Activity signals. Online presence (online, away, do not disturb, offline), last seen time, and the channels you read. This powers presence indicators and unread badges.
• Cookies. A session cookie that keeps you signed in, a CSRF token cookie that protects forms from forgery, and a site gate cookie used during the soft launch period.

4. Why we use your information

• To provide the core service (deliver messages, render your profile, run the ticket system, and so on).
• To keep the platform safe (block bots, throttle abuse, prevent impersonation, enforce community standards).
• To respond to support tickets and direct messages you send to staff.
• To send essential transactional email such as verification links and password resets. We do not send marketing email.

5. Third party services

We rely on a small number of outside providers to make the chat work. Each one only receives the minimum data required for its function.

• Cloudflare Turnstile for bot protection on signup and login forms.
• Email delivery provider for verification and password reset messages.
• Tenor and Giphy for the inline GIF picker. When you post a GIF, the source URL is embedded but no personal data is shared with them.

We do not sell your data. We do not share your data with advertisers. We do not use your messages to train any machine learning models.

6. How long we keep your data

Account data and messages are retained while your account is active. When you delete your account, your profile is removed and your messages are anonymized within thirty days. Ticket transcripts may be retained for staff reference under a generic placeholder name. Backups roll off within ninety days.

7. Your rights

• View and edit your profile data at any time from the settings page.
• Download a copy of your messages and account data on request.
• Request deletion of your account and personal data.
• Correct inaccurate information stored about you.

To exercise any of these rights, send us a message from the email address tied to your account.

8. Security

The site runs over HTTPS with HSTS enabled. We use parameterized database queries, content security headers, server side input validation, and rate limited endpoints to reduce the risk of common attacks. No internet service is perfectly secure, but we keep our dependencies current and run regular code audits.

9. Children

KVB Chat is not directed at children under thirteen. If you believe a child has created an account, contact us and we will remove it.

10. Changes to this policy

When we update this policy in a way that meaningfully affects your rights, we will post a notice in the announcements channel and bump the effective date at the top of this page.

11. Contact

Questions about privacy can be sent to the staff team through a ticket inside the chat, or by email to the address shown on kvb.gg.