RandomMatch Privacy Policy

What RandomMatch collects when you use random video chat, what it does not collect, how long anything is kept, and how to make us delete it.

We do not record your video calls. Audio and video are relayed between you and the person you are matched with; no copy is written to our servers, and there is nothing to retrieve later — not for you, not for anyone else.

Effective 1 January 2024 · Last updated 24 August 2026

1. Scope

This policy covers RandomMatch at https://randommatch.fun and the services reachable from it. It explains what personal data we process, why, who else sees it, how long we keep it, and what you can require us to do.

If you do not accept how we handle data, stop using the service. There is no account to close if you never made one.

2. What We Do Not Collect

Starting here, because on a video chat product it is the part people actually want to know.

  • Call content. Video and audio in a match are relayed between the two participants and are not recorded, stored, or replayed by us. No transcript is produced. Nothing about the call can be handed back to you, to the other person, or to anyone requesting it later.
  • Card numbers. Payments are handled by third-party payment providers. We receive confirmation that a payment succeeded and the details needed to apply it to your account; we never see or store your full card number or CVV.
  • Your contacts, photo library, or files. We ask the browser for camera and microphone access only, and only for the duration of a call.
  • Precise GPS location, unless you separately grant it. Country-level location is derived from your IP address — see section 3.

We also do not sell personal data, and we do not share it with third parties for their own advertising.

3. What We Collect

3.1 Without an account

Most of RandomMatch works with no sign-up. Even then, using it produces some data:

  • Device and browser — device type, operating system, browser and version, screen size, language.
  • Log data — IP address, timestamps, pages and features used, referring URL, and error diagnostics.
  • Approximate location — country or region derived from your IP address, used for matching regions and for fraud prevention.
  • A session identifier — so a match can be routed to you and abuse can be rate-limited.

3.2 If you create an account

  • Account details — email address, and where you sign in through a third-party provider such as Google or Apple, the name, email, and profile picture that provider returns.
  • Optional profile details — display name, avatar, and anything else you choose to add.
  • Purchase records — what was bought, when, the amount, and the transaction reference from the payment provider.

3.3 Safety and moderation data

  • Reports you submit and reports submitted about you, including the session context attached at the time.
  • Moderation signals produced by automated detection during calls — these are enforcement signals, not recordings.
  • Enforcement history — warnings, restrictions, and bans applied to an account or device.

3.4 What you send us directly

Support emails, and whatever you choose to put in them. Please do not include passwords, verification codes, or full payment card details — see Contact Us.

4. Why We Process It

Each purpose below, and the lawful basis it rests on where the GDPR or a comparable law applies to you.

Running the service

Routing matches, connecting calls, applying your preferences, and delivering what you purchased. Lawful basis: performance of a contract with you.

Safety and abuse prevention

Detecting nudity aimed at non-consenting users, underage accounts, scams, and ban evasion, and acting on reports. Lawful basis: legitimate interests in keeping the service usable, and legal obligation where child safety applies.

Payments

Processing purchases, delivering benefits, and investigating disputed charges. Lawful basis: performance of a contract, and legal obligation for tax and accounting records.

Support

Answering your emails and following an issue through to a fix. Lawful basis: performance of a contract, and legitimate interests.

Measurement and improvement

Aggregate analytics that show which flows break and which pages are slow. Lawful basis: legitimate interests, or consent where local law requires it for analytics storage.

Legal compliance

Meeting obligations, responding to valid legal process, and establishing or defending legal claims. Lawful basis: legal obligation, and legitimate interests.

We do not use your personal data to build advertising profiles, and we do not run automated decision-making that produces legal effects about you. Automated moderation can restrict an account; a human reviews that on appeal — see Community Guidelines.

5. What Other People Can See

Worth being precise about, because it is where assumptions go wrong.

Your live camera and voice

Seen and heard by the one person you are matched with, for the duration of that call only. Not recorded by us. Not shown to anyone else afterwards.

Your display name and avatar

Visible to people you interact with inside the product, if you set them. Not indexed by search engines — profile pages on this site carry a noindex directive.

Your email address

Never shown to other users. Used for sign-in, receipts, and support replies.

Your IP address and location

Never shown to other users. Used internally for region matching, fraud prevention, and abuse rate limiting.

Nothing you create on RandomMatch is indexed by search engines. Profile pages and user content on this site are served with a noindex directive, so they do not appear in Google or any other search engine. The pages that are indexed are the ones we write ourselves — the home page, the topic pages, and the blog.

What we cannot control is the other participant. They are a stranger on a live camera, and these rules bind us, not them. Assume anything you show or say may be seen by someone who should not have it, and act accordingly.

6. Cookies & Local Storage

We use browser storage in three ways:

  • Essential — session handling, sign-in state, security, and abuse prevention. The service does not work without these.
  • Functional — remembering your language, region, and interface preferences so you do not set them again each visit.
  • Analytics — aggregate measurement of how the site is used, so we can find broken flows and slow pages.

We do not run advertising or cross-site tracking cookies. You can block or clear cookies in your browser settings; blocking the essential ones will stop matching from working.

7. Who Else Sees It

We share personal data only in these situations:

  • Service providers acting on our instructions — hosting and content delivery, real-time media transport for calls, payment processing, analytics, and email delivery. They may process data only for the service they provide to us.
  • Legal requirements — where we are required to disclose by law, regulation, or valid legal process, or where disclosure is necessary to protect someone's safety. We disclose only what the request actually covers, and we cannot produce recordings that were never made.
  • Business transfers — if the service is merged, acquired, or sold, data may transfer as part of that transaction, subject to this policy.
  • With your consent — where you explicitly ask us to share something.

Some of these providers operate outside your country. Where data leaves a region that restricts transfers, we rely on the transfer mechanisms that law provides, such as standard contractual clauses.

8. How Long We Keep It

Call media

Not retained at all — nothing is written down to retain.

Account data

Kept while the account is active. Removed or anonymised after deletion, within a reasonable period.

Logs and diagnostics

Kept for a limited period for security, abuse investigation, and debugging, then deleted or aggregated.

Reports and enforcement records

Kept long enough to detect repeat behaviour and ban evasion, and to review appeals fairly.

Payment records

Kept for as long as tax, accounting, and chargeback rules require, which is generally longer than the account itself.

When you delete an account we remove or anonymise the personal data attached to it within a reasonable period, except where we are required to retain something — a tax record, or a ban record whose removal would let a banned user return immediately.

9. Your Rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to certain processing, receive it in a portable format, and withdraw a consent you previously gave. Residents of the EEA and the UK have these under the GDPR; California residents have comparable rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.

How to exercise them

Email [email protected] with [PRIVACY] in the subject line and say which right you are exercising. We will ask you to demonstrate control of the account or contact details in question — that check exists so that someone else cannot file the request in your name. We respond within the period the applicable law requires, and in any case within 30 days of verifying you.

Complaints

If you are not satisfied with our answer, you may complain to your local data protection authority. We would rather you came to us first, but that route is yours and we will not obstruct it.

10. Age

RandomMatch is for adults aged 18 or over and is not directed at children. We do not knowingly collect personal data from anyone under that age. If we learn that we have, we delete it and remove the account.

If you believe a minor is using the service or has given us personal data, tell us at [email protected] with [MINOR] in the subject line. Those reports go ahead of everything else in the queue.

11. Security

We encrypt data in transit, restrict internal access to what a role actually needs, and review our systems for vulnerabilities. Call media travels over encrypted transport between participants.

No system is perfectly secure, and claiming otherwise would be dishonest. What you can do on your side: use a unique password if you create an account, avoid signing in on shared devices, and treat any message asking for your password or a verification code as an attack — we never ask for either.

12. Third-Party Links

Pages here may link to sites we do not operate, and another user may send you a link during a call. This policy does not cover them, and we have no control over what they collect. Be particularly careful with links a stranger sends you mid-call — that is the standard delivery route for phishing on products like this one.

13. Changes

We update this policy when our practices, our providers, or the law change. The "last updated" date at the top of this page is authoritative. For material changes we give notice in the product or by email before they take effect. Continuing to use RandomMatch afterwards means the current version applies to you.

14. Contact

PlatformRandomMatch
Privacy & data requests[email protected] — put [PRIVACY] in the subject
Response targetWithin the statutory period, and within 30 days of identity verification

© 2026 RandomMatch. All rights reserved.