SayHey · Information
Privacy policy
This policy covers sayhey.party and its chat backend. Data controller: Mike Johnson. Registered or business address: Pudong New Area, Shanghai, China. For privacy questions and requests, contact [email protected].
1. Anonymous profiles and connections
We process a randomly assigned user identifier, nickname, declared gender, matching preference, profile timestamps and session connection information to provide matching, relay messages and reconnect available chats. Anonymous profiles and active-session routing metadata are stored on the backend. The service does not require your real name, phone number or address book for chatting.
2. Messages, images and videos
Messages and media pass through our server for delivery, including temporary processing in memory. The current chat backend does not write message bodies or uploaded media to its persistent chat store. Copies of conversations and media are kept locally in participants’ browsers. The recipient can also save or redistribute what you send. We do not promise end-to-end encryption or anonymity from network providers.
3. Browser storage and necessary technologies
The site uses localStorage and IndexedDB for the anonymous identity, language, acknowledgement of notices, chat history, delivery state, matching counters and purchase entitlements (credits, lifetime status and timed-pass deadlines), including a Waffo Pancake transaction reference. These records support the service and normally remain until you clear them or your browser removes them. Clearing site data can also remove purchased allowances and chat history; automatic cross-device recovery is not provided. Clearing your browser does not delete the other participant’s copies or our backend profile records. Waffo Pancake may use its own technologies on its hosted checkout under its own privacy policy. We do not run advertising or marketing pixels on SayHey.
4. Optional usage analytics
Google Analytics for Firebase is off until you enable it using the controls below. If enabled, Google receives browser identifiers and technical device, visit and interaction information to measure visits and use of major pages and features. Our event payloads exclude chat content, images, videos, file names, nicknames, declared gender, profile fields, user IDs, session IDs and payment transaction IDs. Page URLs omit query parameters and referrers are reduced to their origin. Google Signals, advertising personalization and enhanced measurement are disabled. You can withdraw your choice below at any time. Analytics is not sent when your browser exposes Global Privacy Control. Google's privacy policy and its Analytics opt-out add-on are linked below.
5. Payments and support
Waffo Pancake is the merchant of record and processes checkout details such as your email, billing and card information on its hosted checkout; complete card details do not pass through or remain on our server. Our server verifies payment notifications and retains the anonymous user reference, internal and provider order references, product, status, time, credit quantity, VIP type and deadline, refunds and a hashed recovery capability. It does not store buyer billing addresses, buyer emails or the raw notification body. Your browser stores an order recovery capability and its balance and VIP entitlements. Support receives information you choose to email us. Do not send passwords, full card numbers or unnecessary chat content.
6. Purposes, legal bases and service providers
We use profile, matching and chat data to provide the service (contract performance); order references and status to deliver paid features and handle refunds (contract performance and legal obligations); support messages to answer requests (contract performance or legitimate interests); and technical logs to protect and operate the service (legitimate interests). Optional Google Analytics for Firebase is based on your choice to enable it. DigitalOcean hosts the site and backend in New York, United States; Cloudflare handles traffic and TLS; Google handles enabled analytics and Gmail support correspondence; and Waffo Pancake handles hosted checkout and payment as merchant of record. Our web-server access log records the request time, proxy address, method and path without query parameters, response status and size, and user agent. Infrastructure providers may retain their own security logs. We do not sell personal information.
7. Retention and your rights
Local history remains under your browser’s storage controls. Closed-session routing records are removed from our backend store. Our remaining periods are: anonymous profiles — 365 days after the last backend connection, unless needed for an active session; active-session routing metadata — 30 days after the last activity or active connection, unless both participants leave sooner; payment order records — unpaid orders 30 days after creation; paid and refunded orders 3 years after the last payment or refund event; processed webhook records up to 90 days; support correspondence — 24 months after the last message in the support conversation; web-server logs — up to 193 days from the request. At the end of each period we delete or anonymize the data unless a specific legal duty requires longer retention. Credit packs and lifetime VIP in your browser do not expire when an old server order record is deleted, but automatic order-status reconciliation then stops; keep your Waffo Pancake receipt if you need support. Google and Waffo Pancake apply their own retention rules. Contact [email protected] to request information about, access to, correction or deletion of backend data associated with your identity; we may need your anonymous identifier or order reference to locate it. Depending on applicable law, you may also request restriction, portability, object to processing, withdraw analytics consent using the controls below, and complain to your local data protection authority. We will respond within 30 calendar days where required, subject to permitted extensions and identity verification.
8. Security and incidents
Traffic uses HTTPS/TLS. Payment recovery credentials are hashed on our server, and Waffo Pancake notifications are checked for a valid signature. Our chat is not end-to-end encrypted, and recipients can keep copies of what you send. No internet service can guarantee absolute security. If a personal-data incident requires notification, we will notify the relevant authority within the applicable period (within 72 hours of awareness where the GDPR requires it) and affected people through available channels as required by law.
9. Marketing
We do not currently send marketing emails or SMS and do not use marketing pixels on SayHey. If we introduce optional marketing, we will explain it, obtain consent where required and provide a working unsubscribe route. Service and security notices are separate from marketing.
10. International transfers
Our backend is hosted in the United States, and Cloudflare, Google and Waffo Pancake may process data in other countries. Where a transfer from the EEA or UK requires a legal mechanism, applicable provider terms may use adequacy decisions or standard contractual clauses. We use HTTPS/TLS and limit the information sent to each provider. Waffo Pancake describes its own payment-data practices in its privacy policy linked below.
11. Children
SayHey is intended only for adults aged 18 or over. We do not knowingly collect information from children. If you believe a child has used the service, contact [email protected] so we can investigate and delete information where appropriate.
12. Third-party services
The linked privacy policies below describe how Waffo Pancake, Google, Cloudflare and DigitalOcean handle information in their own services. This SayHey policy covers our handling of data, including information passed to those providers.
13. Policy changes
We date each version at the top of this page. For material changes that affect your choices or rights, we will post a notice here at least 15 days before they take effect, unless the change only reduces data collection or a shorter period is required for legal or security reasons. Changes do not remove rights attached to existing purchases.
14. Contact
For privacy questions, rights requests or incident reports, contact [email protected]. Please include only the identifiers needed to locate your data; do not send complete card numbers or unnecessary chat content.
Analytics preference
Analytics is off until you enable it here. You can withdraw that choice at any time. Your choice is saved in this browser and applies when you return to SayHey. A browser Global Privacy Control signal also prevents analytics.