Privacy Policy
Version 2026-09-16
AnonChat is operated by StonkLab Inc. (1768908-0), 20829 77A Avenue, Unit 414, Langley Township, BC V2Y 0Y5, Canada. You can reach us at contact@stonklab.com.
The short version
We do not ask who you are. You do not need an account, and we never ask for your name, your email or your phone number to chat. What we do keep is the conversation itself for a limited time, and a record of anything reported to us — because a service where abuse leaves no trace is a service that cannot act on it.
What we store
| What | Why |
|---|---|
| A random identifier in a cookie | So we do not match you with yourself in two tabs, and so a ban means something. It is a random number. It is not linked to your name, and we cannot use it to identify you. |
| Your messages | To deliver them, and so a report can be investigated. |
| Language, any interests you type, and a topic if you pick one | To match you with someone. Only what you enter yourself. |
| In a group room: the name you choose, your messages, and that you created the room if you did | So the others in that room can see who said what. The name is shown only in that room. Like everything else here, it is stored against the random identifier in your cookie — which is what lets a ban apply in rooms too. |
| Conversations with the AI companion | Only if you choose to talk to it. These conversations are kept, screened and deleted exactly like the others on this page. To write a reply, what you have written is sent to the AI model. Depending on how the service is configured at the time, that model runs either through Anthropic’s API, or on a computer we operate, reached through ngrok — a tunnelling service whose network carries the messages on the way and can technically see them. |
| That you confirmed you are 18 or older, and when | To show the rule was stated and what you answered. |
| Reports, including a copy of the reported conversation | So a moderator can see what actually happened. Explained further below. |
| A scrambled (hashed) form of your IP address — only if you are banned | So a ban is not defeated by clearing cookies. We store a one-way hash, not the address, and only on a ban record. |
| Our web server’s access log: your IP address, the time, your browser’s description of itself, and the address of each request — which for a chat includes the random identifier of that conversation | To keep the service running and secure, and to investigate abuse — including, where the law requires it, reports about harm to children. Kept for about 30 days, then deleted. Earlier versions of this policy said we kept no log of IP addresses; that was wrong, and this is the correction. |
| A record that you blocked someone | So you are never matched with them again. It links your random identifier to theirs and nothing else, and the other person is not told. |
What we do not do
- We do not sell or share your data with advertisers. There are no ad trackers.
- We do not use third-party analytics or tracking. We do count how often things happen — how many people start a chat, how many get a reply — as daily totals with nothing attached that could identify you or tell us what you did.
- We do not ask for your real name, email or phone number to use the chat.
- We cannot read a conversation back to you after it has been deleted.
How long we keep it
- Conversations: 30 days. One-to-one chats, group rooms and conversations with the AI companion alike: after that the messages are deleted automatically, and so is the name you used in a room once you have not been back to it for that long.
- Reports: 365 days. Deliberately longer than the chats themselves, and you are entitled to know why. When someone is reported, the other person can close their tab and be gone in seconds, and the conversation would otherwise be deleted before anyone reviewed it. So filing a report takes a copy of that conversation at that moment. Without it a report would be a complaint nobody could act on.
- Automatic reports. If a message says its writer is under 18, a copy of that conversation is sent to moderators as a report automatically — in a one-to-one chat, a group room or a conversation with the AI companion — once, not with every message. Nothing else files a report without a person pressing Report. These are kept like any other report.
- Backups: 7 days. We copy the database each night so the service can recover from a failure, and delete each copy after 7 days. That means something deleted on the schedules above can survive in a backup for up to 7 more days, and then it is gone too. Backups are kept on the same server and are not sent anywhere else.
- Bans, blocks, and the record that you confirmed your age: kept. Deleting these on a schedule would quietly un-ban people, or match you again with someone you blocked. They contain no messages.
Cookies
Two, both strictly necessary, neither used for advertising:
anonchat_guest— the random identifier described above. Expires after a year.anonchat_session— only set if you sign in to a moderator account.
Both are httpOnly, meaning scripts on the page cannot read them. Clearing your cookies gives you a new identifier and ends any ban attached to the old one; we are telling you that because it is true and because pretending otherwise would be dishonest, not because we recommend it.
Your rights
Depending on where you live you may have the right to ask what we hold about you, to have it corrected, or to have it deleted. Write to contact@stonklab.com.
Two honest limitations. First, because we do not know who you are, we usually cannot connect a request to your data — the only thing that could link them is the cookie in your browser, so a request from a different device is not something we can act on. Second, we will not delete a report. Removing the evidence of reported abuse on request is not something this service offers, whoever asks.
Sharing
We share data with nobody, except where we are legally required to — for example a valid order from a court or a law enforcement authority — or where it is necessary to report suspected harm to a child to the relevant authorities. The one exception you choose yourself is the AI companion: what you write to it goes to the AI model, and through ngrok or to Anthropic, as described above, so that it can reply.
Where your data is held
On servers we rent in the United States, operated by StonkLab Inc., a company registered in British Columbia, Canada.
The AI companion is the exception to where things are processed, not to where they are kept: while it writes a reply, what you wrote passes through ngrok’s network to a computer we operate outside that data centre, or to Anthropic in the United States. The conversation itself is stored on the servers above.
Changes
This policy is versioned. The current version is 2026-09-16, shown at the top of this page. If we change it in a way that matters, the version changes with it.
What changed in this version:
- Corrected: earlier versions said we keep no log of visitors' IP addresses. That was not true. Our web server keeps an access log, including IP addresses, for about 30 days. It is described below.
- Group rooms and AI companion conversations are now deleted on the same schedule as one-to-one chats. Before this version they were not deleted automatically, which this policy did not say.
- We now describe the AI companion: what you write to it is sent to the AI model that writes its replies, through Anthropic or through ngrok's network to a computer we operate, and ngrok can technically see it on the way.
- We now describe automatic screening: if a message says its writer is under 18, a copy of that conversation goes to a moderator as a report, whether or not anyone pressed Report.
- We now describe the names you choose in group rooms, and our nightly backups and how long they are kept.