Privacy Policy

Last updated September 30, 2026

This Privacy Policy explains what personal data KinkChat ("we", "us", "the Service", at mykink.chat) collects, why, and what rights you have over it. KinkChat is an adult (18+) service for chatting and role-playing with fictional AI characters.

The data controller is KinkChat. For any privacy question or to exercise your rights, contact us at legal@mykink.chat. We have not appointed a Data Protection Officer.

1. Who this applies to

You must be 18 or older to use KinkChat. We do not knowingly collect data from anyone under 18. See our Safety page and Content Policy. The whole Service is behind a one-time age gate.

2. What we collect

Information you give us

  • Account: email address, a password (stored only as a secure hash, never in plain text), your display name, and the name you choose for characters to call you.
  • Adult confirmation: the fact and time you confirmed you are 18+.
  • Preferences: your language and your default interaction settings for new scenes.
  • If you sign in with Discord (optional): your Discord account identifier and username, received from Discord to create or link your account.
  • Conversations you create: the scenes (chats / role-plays) you start, every line you write, and the AI character replies generated for you. These are stored as the record of your conversation so you can return to it.
  • If you create characters (Creator Studio): the character details, descriptions and settings you submit for review.

Information collected automatically

  • Usage and product analytics: events such as starting a scene, how many lines you have sent, plan and upgrade actions, and which experiment group you are in. We collect the fact that an event happened and counts — not the content of your messages.
  • Session replay: we record a sample of sessions to understand how the interface is used. The conversation transcript, and the message composer, password and email fields, are masked and are not captured by replay.
  • Technical data: IP address, browser / device information, a device identifier used to link your activity to your account, and server request logs. We use IP addresses to keep the Service secure and to rate-limit abuse.
  • Cookies and local storage: see Section 6.

We do not ask for, and you should not send us, real-world identifying documents, payment card numbers (there is no paid checkout today), or sensitive personal data about third parties.

3. Why we use it, and our legal basis (GDPR)

Create and run your account; provide chats and store your conversations
Performance of a contract
Generate AI character replies (sending your messages to our model provider — see Section 5)
Performance of a contract
Confirm you are an adult and keep the Service 18+
Legal obligation / legitimate interest
Send the account-confirmation email
Performance of a contract
Keep the Service secure, prevent abuse, enforce limits and our rules
Legitimate interest
Product analytics and experiments to improve the Service
Legitimate interest (analytics are pseudonymous; content is excluded)
Comply with legal requests and our own legal obligations
Legal obligation

Where we rely on legitimate interest, you may object (Section 8). We do not use your conversations for advertising, and we do not sell your personal data.

4. Your conversations

Your conversations are intimate, and we treat them that way.

  • They are stored so the Service can show you your own scenes and continue them.
  • They are not used for advertising or shared with advertisers.
  • They are sent to our AI model provider only to generate the next reply (Section 5).
  • Staff access to conversation content is restricted to what is necessary to operate the Service (for example investigating a safety report or a technical fault) and is not routine.
  • Our product analytics are designed not to receive message content (Section 2).

5. Who we share data with (processors and third parties)

We use a small number of service providers who process data on our behalf, under contract:

  • AI model provider (Venice AI): to generate character replies, your conversation is sent to our model provider for inference. The provider is outside the EU (United States); see Section 7 on international transfers.
  • Hosting and storage (DigitalOcean): servers, database backups and media are hosted with DigitalOcean in the EU (Frankfurt).
  • Product analytics (Amplitude): pseudonymous usage events and sampled, content-masked session replay, processed in Amplitude's EU region.
  • Email (Mailgun): to send the account-confirmation email; receives your email address.
  • Discord: only if you choose Discord sign-in or the Discord reward, we exchange the minimum data needed with Discord.

We may also disclose data if required by law, to respond to lawful requests, to enforce our Terms, or to protect the rights, safety and property of users, the public or us.

6. Cookies and local storage

  • Session cookie — keeps you signed in; strictly necessary; HTTP-only.
  • Age-gate cookie (nook-adult) — remembers that you confirmed you are 18+, for up to a year; strictly necessary to provide the Service.
  • Language cookie (nook-lang) — remembers your chosen language.
  • Analytics identifier — a device identifier set by our analytics to measure product usage.
  • Theme — your light / dark choice is stored in your browser's local storage, not sent to us.

Strictly necessary items keep the Service working and cannot be switched off from within it. You can clear cookies in your browser, but the age gate and sign-in will then ask again.

7. Where your data is processed (international transfers)

We host in the EU (DigitalOcean, Frankfurt) and use Amplitude's and Mailgun's EU regions. Our AI model provider processes conversation content outside the EU (United States). Where data leaves the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Your rights

If you are in the EU / EEA (and similar rights apply elsewhere), you have the right to:

  • access the personal data we hold about you;
  • rectify inaccurate data (you can edit much of it in your profile);
  • erase your data ("right to be forgotten");
  • restrict or object to processing based on legitimate interest;
  • data portability — receive your data in a portable format;
  • withdraw consent at any time where we rely on consent.

To exercise any of these, contact legal@mykink.chat. We will respond within the time the law requires (one month under GDPR, extendable). You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), uodo.gov.pl.

Deleting your account removes your account data and your conversations from the live Service; residual copies may persist in encrypted backups for a limited period before they age out.

9. How long we keep data

  • Account data: while your account exists; deleted on account deletion.
  • Conversations: until you delete the scene or your account.
  • Analytics events: retained for analysis and to run experiments; pseudonymous and content-free.
  • Backups: database backups are kept on a rolling basis and age out automatically.
  • Logs: technical / security logs are kept for a limited period for security and debugging.

10. Security

Passwords are stored hashed. Traffic is served over HTTPS. Session cookies are HTTP-only. Access to production data is limited to what is needed to run the Service. No system is perfectly secure; we cannot guarantee absolute security, but we work to protect your data and will notify you and the relevant authority of a breach where the law requires.

11. Children

KinkChat is strictly for adults. We do not knowingly allow anyone under 18, and we do not knowingly collect their data. If you believe a minor is using the Service, contact legal@mykink.chat and we will act.

12. Changes to this policy

We may update this policy. We will change the "Last updated" date, and for material changes we will give notice within the Service. Continuing to use KinkChat after a change means you accept the updated policy.

13. Contact

Questions or requests: KinkChat — legal@mykink.chat.