PrivacyPolicy

Your privacy is our priority. Learn how we protect your information.

Last updated: July 18, 2026

Data Collection & Security

  • We do not record complete video or audio calls or retain full text-chat histories. Sampled video frames, report evidence, and limited operational metadata may be processed or retained as described below.
  • When you sign in with Google, we store your Google account id, email, display name, avatar, gender selection, and an age-derived date used for 18+ verification. You provide an age, not an exact date of birth.
  • We store account-status flags (age-verified, blocked, blocked-reason) plus timestamps (account created, last login, ban issued/lifted).
  • We collect IP addresses, IP-derived country or region, device information, timestamps, and session metadata for connection routing, security, abuse prevention, and legal compliance.
  • We use Grafana Cloud to capture operational events. Stored fields can include connection metadata, Google identifiers when signed in, IP and geo data, moderation events, and ban records. These records follow the configured Grafana Cloud retention period.
  • A country label and flag derived from your IP address may be shown to your chat partner. Camdiv does not show your precise location or IP address to them.

Device Fingerprint

  • On each visit we generate a device fingerprint from your browser by combining a small canvas rendering, basic WebGL parameters, your user-agent string, and your timezone offset. The result is hashed and cached in your browser's localStorage.
  • This fingerprint is sent only to Camdiv during the socket handshake. It is used to enforce bans across browser sessions and to make ban evasion harder.
  • It is not shared with third parties and is not used for advertising or cross-site tracking.

Cookies & Local Storage

  • Authentication session cookie (HTTP-only, signed by NextAuth): keeps you signed in after Google sign-in and is required for signed-in account features.
  • Staging-gate cookie (HMAC-signed, preview environments only): grants access to non-production preview environments. Not present on the public site.
  • Browser storage entries include the device fingerprint, guest id, guest-mode and gender selections, ban-review state, and the collapsed state of the landing-page ad.
  • Google Analytics and Google AdSense are optional production integrations. When enabled, they may set or read cookies and similar identifiers. You can block or clear these through your browser settings.

Anti-Abuse & Ban Policy

  • Signed-in member bans may be tied to a Google account. Guest and member enforcement may also use device and network signals under our Terms of Service. Clearing cookies, switching browsers, or changing IP does not necessarily bypass a ban.
  • Automated safety systems sample frames during video matches; explicit content confirmed across multiple frames can trigger an automatic suspension.
  • High-confidence user reports corroborated by automated systems may result in immediate suspension. Borderline signals and suspected-minor flags route to a human reviewer; bans on those paths are issued only after human confirmation.
  • Banned users can request review of any ban from the block screen. Confirmed incorrect bans are reversed after review.
  • Browser fingerprints (for anonymous traffic) and Google account identifiers (for signed-in users) are the primary ban enforcement layers. IP addresses are retained as evidence for audit and admin review, not used as a primary connection gate.

Minors & Age Restrictions

  • Camdiv is strictly an 18+ platform.
  • Guests must confirm they are 18 or older. On first Google sign-in, users submit their age and a gender option; an underage account is blocked and cannot repeat the age check with the same Google account.
  • Automated safety systems can flag a sampled frame as a suspected-minor case during a chat. These cases route to a human reviewer who can suspend the account.
  • We do not knowingly collect personal data from minors. If you believe a minor is using the platform, hit the in-app Report button or email [email protected].

Data Retention

  • Camdiv does not record full video or audio calls. Sampled frames and report evidence may be processed or retained as described in this policy; transient session data is discarded when it is no longer needed.
  • Moderation evidence frames are retained only when they triggered a ban or a human-review flag, so the affected user can request a review. Evidence is stored in DigitalOcean Spaces; access is restricted to admin moderation staff and review systems.
  • Your account record (Google id, email, name, avatar, gender selection, age-derived date, and status flags) is retained for the life of your account; you can request deletion at any time.
  • Operational telemetry (connection metadata, Google identifiers when signed in, IP / geo data, moderation and ban records) is retained per the Grafana Cloud retention policy.

How Calls Connect

  • Calls use WebRTC (encrypted peer-to-peer media). When a direct connection is not possible — for example, because of certain network or NAT configurations — encrypted media is relayed through Camdiv-operated TURN servers.
  • Relay servers do not record media. They forward encrypted packets between the two participants and discard them.
  • No third-party relays are used.

Advertising & Data Sales

  • We do not sell or rent your personal information.
  • When ads are enabled, Google AdSense may process cookies, device and browser details, IP address, and ad interactions to deliver and measure advertising under Google's policies.
  • The service providers that may receive data are listed below. Each receives data for the purpose described.

Sub-Processors

  • Google (Sign-In with Google): authenticates your account. Receives your sign-in request and returns your Google profile (id, email, name, avatar).
  • DigitalOcean: hosts our application servers, managed PostgreSQL database, Spaces (for moderation evidence storage), and TURN relay servers.
  • Grafana Cloud: receives operational telemetry (connection metadata, Google identifiers when signed in, IP and geo data, moderation and ban events).
  • Image-safety service (Google Gemini and NudeNet): processes sampled video frames for safety classification. Provider handling follows the applicable service terms; Camdiv retains moderation evidence only as described above.
  • Google Analytics: when enabled, receives page, device, browser, and interaction data. It is configured with IP anonymization and advertising signals disabled.
  • Google AdSense: when enabled, receives device, browser, network, cookie, and ad-interaction data needed to deliver and measure ads.
  • International transfers: where data flows across borders, we rely on the contractual or adequacy mechanisms offered by the relevant provider where required.

Community Guidelines

  • For more details on expected user behavior, please refer to our Community Guidelines.
  • We prioritize the safety and comfort of our community above all else.

Your Rights & Contact

As a Camdiv user, you may request access to, correction of, or deletion of personal data associated with you. Depending on whether you use guest or signed-in access, this can include account profile data, age-confirmation data, device and network identifiers, moderation evidence, and operational records described above. You stay anonymous to the people you meet on the platform.

If you have any questions or concerns about our privacy practices, please contact our support team at [email protected].