← Back to home

PRIVACY POLICY

Privacy Policy

Effective: 2026-09-17Version: 2026-09-17.2Operator: bx design

URIAL is a no-sign-up anonymous chat service. This policy explains the information that may be collected when the Service is used, the purposes of processing, external services, retention periods and safeguards.

1. Scope

This policy applies to the URIAL website, normal random chat, invite rooms, reports, support and related operational functions. Whether a particular data item qualifies as personal information, personal data or similar regulated information may depend on context and linkability.

2. Information collected

  1. Profile: nickname, optional age/gender/short comment, and an avatar if you upload one.
  2. Conversation/content: chat text, images, video, voice messages, files, send/receive timestamps, read status and report content.
  3. Connection/session: IP address, timestamps, session identifiers, reconnect token, random device identifier, room information and connection/recovery logs.
  4. Device/browser environment: User-Agent, OS/browser type, language/time zone, screen and viewport information, pixel ratio, touch support, network characteristics, browser capability/support states, storage availability, and camera/microphone/notification permission states. URIAL does not query geolocation permission.
  5. Safety/operations: moderation detections, restrictions, reports, bans, rate-limit events, administrative actions, incident and audit logs.
  6. Consent records: 18+ confirmation, acceptance of policies and the Important Notice, timestamps and document versions.

3. Purposes of use

Information may be used to provide matching, messaging, media, read status, reconnection and translation; enforce the 18+ rule and restrictions on dating/contact exchange; investigate reports and abuse; secure and troubleshoot the Service; comply with law and valid requests; improve reliability, safety and user experience; and provide important notices.

4. Location-related information

URIAL does not use the Browser Geolocation API and does not request GPS/location permission.

For safety, abuse prevention and troubleshooting, the connection IP address may be sent to an IP geolocation provider (currently ipwho.is, with ipapi.co as a fallback) to estimate country, region, city and approximate coordinates. IP-derived location is not GPS and may be inaccurate. Approximate location may be visualized for authorized operators using Google Maps or another mapping service. It is not shared with the chat partner.

5. Media and metadata

Images, video, audio and files may be stored and processed for delivery, safety, incident response and rule enforcement. If an uploaded original already contains EXIF, GPS, capture time, device information or other metadata, the original or extracted metadata may be retained for safety/investigation purposes. Image copies delivered to the other participant are designed to normalize orientation and remove EXIF-style metadata so original GPS metadata is not directly passed to the other user.

6. Translation and external services

Live translation is optional. If either participant enables translation, message text selected for translation from both participants may be sent to Google Cloud Translation API and the translated result returned to URIAL. Each participant sees a separate disclosure and confirmation before first enabling translation. Turning translation off prevents translation requests initiated by that participant, but your messages may still be translated when the other participant has enabled translation. When an authorized operator needs to review stored conversations for reports, safety, rule enforcement or similar operational purposes, the operator may also use the administrative translation function, which sends the relevant stored message text to the same API. Google's contractual and data-processing terms apply to Google's processing.

URIAL may also use hosting/network providers, GeoIP providers and Google Maps. Where applicable law requires specific disclosures, contracts, supervision, consent or measures concerning processors, third parties or overseas processing, URIAL will implement those measures as required.

7. Retention

  1. Normal random chat: chat/operational logs and ordinary media are generally scheduled for deletion approximately 90 days after creation. Users do not receive a history/search feature for past random chats.
  2. Invite rooms: a room and its conversation history may remain until the room is administratively deleted.
  3. Legal Hold: normal deletion may be suspended when preservation is reasonably required for legal compliance, disputes, serious abuse/security investigations or valid official requests.
  4. Backups: deleted information may remain in backups for a limited period until backups rotate, and is not retained there for ordinary active use.

8. Operator review

URIAL is not designed for continuous human monitoring of conversations. Authorized operators may review relevant stored conversations, media and logs only when reasonably necessary for reports, abuse/rule enforcement, security, troubleshooting, legal compliance or similar concrete operational needs. Access controls, authentication and audit logging are used as reasonable safeguards.

9. Cookies and browser storage

URIAL may use Local Storage, Session Storage or similar browser storage for theme/language settings, sound/vibration preferences, a random device identifier and session-recovery information. If advertising, analytics or behavioral tracking is introduced later, related disclosures and consent/opt-out mechanisms will be updated as required.

10. Security

URIAL uses reasonable safeguards appropriate to the scale and risk of the Service, including administrator authentication/authorization, access controls, HTTPS, secret separation, logging/monitoring, rate limits and backups. Safeguards are reviewed as the Service changes.

11. Third-party disclosure and processors

Personal data is not disclosed to third parties without consent except where permitted or required by law, including circumstances necessary to protect life, body or property. Service providers may process information on URIAL's behalf where reasonably necessary to operate the Service. URIAL will take supervision and contractual measures required by applicable law.

12. Questions and statutory requests

Questions about this policy or data handling can be sent to urial@bxd.jp. Where applicable legal requirements are met, URIAL will respond to requests concerning disclosure, correction, suspension of use or deletion of retained personal data. Because URIAL is anonymous, some requests may not be technically or legally actionable when stored data cannot reasonably be linked to the requester.

13. Changes

This policy may be updated in response to changes in law, guidance, Service design or providers. Material changes will be announced through the Service and renewed consent may be requested where appropriate.

Operator: bx design (sole-proprietor trade name)

Automated media checks

When automated media checks are enabled, photos, avatar images and sampled video frames are sent to Google Cloud Vision, and video audio / voice messages to Google Cloud Speech-to-Text, before delivery. We check sexual or violent imagery and prohibited text or speech. Your required Important Notice consent before entry covers this processing, so selecting media does not show another confirmation. Blocked, uncheckable or timed-out media is not delivered. Temporary frames and decoded audio are discarded when processing ends. Blocked original media, matched terms, detection methods, timestamps, sender and room information are retained for administrator review for normally 90 days, except when preservation is required. Passing OCR and speech transcripts are not retained as review records. Video frames are sampled every 0.5 seconds, and speech recognition targets Japanese and English. Brief imagery, other languages, context or disguised language can be missed; false positives also occur. This does not determine a person’s age or the legality of content. Please report inappropriate material. Google processing is subject to its contractual and data-processing terms.