Privacy Policy

Koi Koi is built around anonymity, so we try to hold as little data about you as we reasonably can. This page explains what we collect, why, how long we keep it, and how to get it deleted. Koi Koi is operated from Taiwan; this policy is written to meet Taiwan's Personal Data Protection Act, and applies the same standard to every visitor regardless of where you're chatting from.

What we collect

  • Email and password to create and secure your account. Passwords are hashed; we never store or see the plain text.
  • Username, chosen at signup. Shown to strangers only if you both mutually friend each other.
  • Whether you're 18+, verified once at signup. We deliberately do not store your actual birth date, only a yes/no and the timestamp it was confirmed. Less sensitive data stored means less exposed if anything ever goes wrong.
  • Interests you add, used only to help match you with someone who shares one.
  • Chat messages, kept only long enough to deliver them and support a report if one is filed, then deleted (see retention below).
  • Photos sent to friends, stripped of location and device metadata before storage, deleted within 72 hours regardless of whether they were viewed (see retention below).
  • IP address, processed briefly to slow down spam and abusive signups. Not stored long-term or linked to your profile.

How long we keep it

  • Chat messages: deleted about 24 hours after a chat ends.
  • Photos sent to friends: deleted within 72 hours of being sent, regardless of whether the recipient viewed them, how many views they allowed, or whether the recipient's own viewing limit ran out sooner. This is a fixed backstop, separate from whatever view limit the sender chose.
  • A snapshot of a reported conversation: kept up to 60 days after the report, then deleted, separately from the general 24-hour window above.
  • Account data (email, username, interests, friends list): retained until you delete your account.

Who can see what

During an anonymous chat, the other person only ever sees a random placeholder name, never your real username. There's no way for them to look up who you are from that chat alone. Your real username becomes visible to someone only once you have both sent a friend request for that same conversation and both accepted.

Your rights

You can delete your account and its data at any time from your account settings; this is self-serve and takes effect immediately. You can also request a copy of your data or ask us a question through the suggestion box. If you're in the EU, these rights apply to you the same way under GDPR.

Security and breaches

Data is stored with row-level access controls so that, by design, even we don't have a casual way to browse who's anonymously talking to whom. In the event of a data breach that could affect your rights, we'll notify affected users and the relevant authority as required by law.

Cookies

Koi Koi uses one cookie to keep you signed in. We don't use advertising or tracking cookies.

Children

Koi Koi is for adults 18 and older. We don't knowingly collect data from anyone younger, and an account found to belong to a minor gets suspended.

Changes

If this policy changes in a meaningful way, we'll update the date at the top of this page.