Privacy Policy

Effective 15 August 2026

What we collect

Email address and password: to create your account and verify your sign-in. Your password is never stored in plain text — only an irreversible hash of it.
Profile: the display name you choose, an avatar number and an optional short bio.
Referral data: who brought you in, if you arrived through an invite link — so abuse can be traced.
Session logs: when a match started and ended, and how long it lasted. Not the content — timestamps only.
Reports: when you report someone, the reason and the identities of both parties.

What we never collect

Video and audio are never recorded. Calls run directly between the two devices over WebRTC, encrypted with DTLS-SRTP, and never pass through our servers. Text messages are never stored — they are relayed between the two parties and never written to a database. No location, contacts, photo library or advertising identifier. No third-party analytics or advertising SDKs.

Recording of calls

Phazar does not record calls. The other participant may, however, record or stream on their own device, which you accept at signup. If you prefer not to be recorded, use text chat or keep your camera off.

Camera and microphone

Used only during a video chat, with your permission. Never accessed while the tab is in the background. You can revoke permission at any time in your browser's site settings (text chat keeps working).

Purpose and retention

Data is processed solely to provide the service, keep the community safe and prevent abuse. Nothing is sold or shared for marketing. Session logs are deleted after 90 days, reports after 12 months. Data is stored on Cloudflare infrastructure.

Your rights (GDPR / KVKK)

You have the right to access, correct and delete your data. Profile → Delete Account removes your account and personal data immediately and permanently. Requests: iletisim@phazar.app

Children's privacy

Phazar is not directed at anyone under 18 and does not knowingly collect data from children. Accounts found to belong to someone under 18 are closed and their data deleted.