Privacy Policy

Effective 23 July 2026

This Policy explains how whisp.online handles personal data across accounts, rooms, games, social features, uploads and creator tools.

1. Data we collect

• Account data: username, email, password hash, profile and verification status.
• Content and social data: messages, comments, relationships, groups, uploads, inventory and room layouts.
• Usage and device data: IP address, browser, device, timestamps, activity, errors, security events and cookie identifiers.
• Transaction data: virtual-currency ledger entries, purchases and receipts. Payment providers handle payment-card data under their policies.

2. How and why we use data

We use data to provide accounts and rooms, synchronize shared experiences, deliver messages and media, process purchases, secure and debug the service, prevent abuse, enforce rules, answer support requests, meet legal duties and measure aggregate performance. Where applicable, our legal bases are contract, legitimate interests, consent and legal obligation.

3. Visibility and sharing

Usernames, profiles, avatars, public rooms, comments and published items can be visible to others. Private messages are shown to participants but processed for delivery, safety and lawful moderation. We share data with service providers needed for hosting, storage, email, security, analytics and payments, with users as product features direct, or when law and safety require it. We do not sell personal data.

4. Retention and security

We retain data while needed for the service, security, disputes, law and backups. Deleted data may remain in protected backups until the normal cycle expires. We use access controls, encryption in transit, monitoring and backups, but no online system is risk-free.

5. Cookies

Essential cookies and local storage support login, security, preferences and window state. Analytics may measure reliability and product use. Blocking essential storage can break the service.

6. Your rights

Depending on where you live, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent. You may complain to your data-protection authority. We may verify identity before acting.

7. Children and international processing

The service is not intended for children under 13. Data may be processed where our providers operate, using safeguards required by law.

8. Changes and contact

We may update this Policy and will announce material changes when required. For privacy questions or rights requests, email support@whisp.online. Never send your password.