Privacy Policy — ChatIsAt

Effective date: 2026-08-12 Last updated: 2026-08-14

This Privacy Policy describes how ChatIsAt (“we”, “us”) collects, uses, and shares information in connection with:

• the https://chatisat.com Website (including online “rooms”, chat, and related features); and
• the ChatIsAt browser Extension (UI Overlay to allow a spatial browsing experience while in “Solo” mode and optional “Social” “rooms” overlaid on browser webpages).

Together, the Service.

This is not legal advice. It is an operational disclosure meant to match how the product works.

Single purpose of the Extension. The Extension’s purpose is to provide an UI Overlay for a spatial browsing experience while Solo browsing and, when you explicitly opt in, Social chat rooms overlaid on webpages. We collect and process only the data necessary for that purpose (and related operational, security and moderation needs).

1. Who this Service is for

• You must be at least 18 years old.
• The Service is not offered to users in: European Economic Area (EEA), United Kingdom, Switzerland.
• We may expand or limit availability to additional regions later. If we do, we will update this policy and our practices accordingly.

2. What the Extension is (and is not)

The ChatIsAt Extension provides a UI Overlay (including a Chat Panel / Dock, Avatars and related UI like “toast messages” etc. and associated behavior and interactivity of those components) on top of web pages you visit.

• Importantly, that UI Overlay is part of our Extension, not part of the underlying website!
• We do not control, endorse, or take responsibility for the content, terms, or practices of those websites.
• We do not send the textual or DOM content of the pages you visit to our servers. We may process page URLs and your use of our UI Overlay, as described below.
• The UI Overlay is drawn on top of the page. It may visually affect what you see or how you interact with the page. (for example, the Chat Panel / Dock or Avatars may partially hide some of the page content)

3. Information we collect

3.1 Account and profile

• Social features require signing in. Sign-in providers we use: Google.
• Solo use of the Extension (e.g. local Avatar / Local Notes) can work without an account.
• When you sign in, we may receive and store identifiers and profile information from the provider, and profile data you set in the Service, such as: display name, avatar / UI preferences, account identifiers from the sign-in provider.

3.2 Messages and social activity

• We store chat messages you send in chat rooms on the Service (including Website rooms and Extension Social rooms).
• Messages are visible to other participants in the relevant room and may be processed by us for operation, moderation, and the sharing described in section 5.
• Do not treat chat as private or secret from us. We may read, store, and use messages as described in this policy.

3.3 Extension usage, URLs, and presence

• For Extension Social rooms we use normalized page URLs (typically origin + path, without unnecessary query/hash details). This is the only browsing-related data we collect, and only when you (opt in and) join a Social room.
• We do not process any of your mouse movements or any of your ordinary browsing experience, but we may process how you use our Extension: Avatar positions, movement, presence, session activity, and similar usage data related to Solo and/or Social features.
• We may allow more than one room for the same page URL (for load, language, geography, or other reasons). Which rooms you are allowed to join is decided by us.
• In Extension’s Solo or Social mode, the positions of Avatars (including those of other users of the Extension) are determined locally, and as such do not disclose the real positions of those Avatars. Likewise, the position of your Avatar is not shared with other users. Further, some of the movements of those Avatars that you see may be generated locally by the Extension at our discretion.
• Local Notes that you type in the Extension stay only in your browser’s Extension Storage. We never send them to our servers nor to anywhere else. Other people who use the same browser profile, or other software on your computer, may still be able to read them. Browser updates or other software may delete or change them. Do not put anything confidential or important in Local Notes.

3.4 Technical data

• We do not currently persist IP addresses.
• We may begin collecting and storing IP addresses for security, abuse prevention, and operations.
• We do not currently persist detailed connection logs beyond what is needed to run live sessions.
• We may begin retaining connection and diagnostic logs.
• Browsers and our stack may automatically process standard technical data (e.g. timestamps, protocol metadata) while you are connected.

3.5 Cookies and local storage

• We use cookies or similar technologies for sessions and sign-in (for example a session identifier). These are essential for authentication and are not used for advertising.
• The Extension uses browser Extension Storage for settings (e.g. whether the layer is enabled, Chat Panel / Dock preferences, Solo position). This storage stays on your device.
• We do not currently deploy third-party analytics cookies; we may do so later (see below).

4. How we use information

We may use information for:

• operating and securing the service
• moderation and safety
• product improvement and research
• communication about the service
• advertising and marketing that does not use extension-collected data for personalization
• sharing with website owners as described
• business transfers (merger, acquisition, asset sale)
• compliance with law

We do not use data collected by the Extension for personalized advertising, and we do not sell or transfer that data to advertising platforms or data brokers. But read below how we CAN share information with website owners.

5. How we share information

5.1 Website owners (publishers)

When you use the Service in connection with a particular website or page (especially the Extension’s Social rooms on a site/page), we may share data with that website’s owner (or their agents), including:

• Social chat messages in rooms tied to that site/page
• Presence and participation in those rooms
• Avatar positions and movement on the page (where applicable)
• Session and usage behavior related to the extension or room on that site
• Aggregated or individual activity metrics for that site

The website owner may use this information as they see fit, subject to their own legal obligations. This sharing is part of the Extension’s design for page-tied Social rooms.

Local Notes that never leave your device are not shared with website owners.

5.2 Service providers and platforms

We share data with vendors that help us run the Service, for example:

• Google (sign-in / OAuth)
• Hosting and infrastructure providers that process data to run the service

We may add analytics such as: Google Analytics or similar.

We may use advertising partners in the future for non-personalized or contextual advertising only.

Possible later categories:

• Analytics providers
• Advertising partners (for non-personalized / contextual ads only)
• Error / performance monitoring tools

5.3 Legal, safety, and business transfers

We may share or disclose information if we believe it is necessary to comply with law, enforce our terms, protect rights and safety, or in connection with a merger, acquisition, financing, or sale of assets.

5.4 Public or other users

Content you post in rooms is available to others in those rooms (and may be shared with site owners as above).

6. Retention

• Chat messages: at most 2 months (subject to earlier deletion or longer retention for safety/legal reasons).
• Account and profile data: while your account is active and as needed afterward for legitimate business and legal purposes.
• We may retain backups and logs for a limited period after deletion.

7. Security

We take reasonable measures to protect information. Personal and sensitive data is transmitted over secure connections (HTTPS / WSS). No method of transmission or storage is fully secure. You use the Service at your own risk regarding residual security incidents.

8. Your choices

• You may stop using the Service or uninstall the Extension.
• You may sign out; Social features require being signed in.
• Browser controls can clear cookies and Extension Storage.
• To request access to or deletion of your account or personal data, email legal@chatisat.com with a clear description of the request. We will verify the account and respond within a reasonable time. We may limit responses where the Service is not offered, where law does not require a response, or where requests are abusive or infeasible.

9. Children’s privacy

The Service is not directed to anyone under 18. We do not knowingly collect personal information from children under 18.

10. International use and excluded regions

The Service is operated in a manner consistent with not offering it in: European Economic Area (EEA), United Kingdom, Switzerland. Do not use the Service if you are located in those regions. We may change this boundary later and will update this policy as needed.

11. Changes

We may update this Privacy Policy at any time. The “Last updated” date will change. If we introduce materially different data practices after you have installed the Extension, we will provide prominent notice (for example via an Extension update note or in-product message). Continued use of the Service after an update means you accept the revised policy.

12. Contact

ChatIsAt Email: legal@chatisat.com Website: https://chatisat.com