Privacy Policy

This Privacy Policy explains how Orbit ("we", "us", or "our") collects, uses, and safeguards your information when you use our real-time chat platform. By creating an account or using Orbit, you agree to the practices described here.

We collect the information you give us directly, including:

• Account details — your email address, username, display name, and password (which is always stored in a hashed, unreadable form).
• Profile information — anything you add to your profile, such as a bio, avatar image, or preferences.
• Content you create — posts, messages, room activity, images you upload, and any reports you submit.

When you use Orbit, we automatically collect limited technical information needed to run and secure the service:

• Device and connection data such as your IP address, browser type, and timestamps.
• Usage data about how you interact with features, used to keep the service reliable and safe.
• Cookies and local storage entries required for sign-in sessions and to remember preferences like your theme.

We use the information we collect to:

• Provide, operate, and maintain the service.
• Authenticate you and keep your account secure.
• Power real-time features such as matching, rooms, direct messages, and notifications.
• Detect abuse, enforce our rules, and keep the community safe through moderation.
• Send essential transactional emails, such as password resets and security notices.
• Understand usage and improve the product.

Random one-on-one chats are ephemeral — once a match ends, that conversation is not retained. Messages in private chats and rooms are stored so that you and the people you talk to can see your history. You can delete your content or your entire account at any time from your settings.

Where applicable law (such as the GDPR) requires it, we rely on the following legal bases: performance of our contract with you (to provide the service), our legitimate interests (to keep the platform safe and improve it), your consent (where we ask for it), and compliance with legal obligations.

We do not sell your personal information. We share it only in these limited situations:

• With other users — your public profile, posts, and any messages you send are visible to the people you share them with.
• With service providers — trusted vendors who process data on our behalf to host, operate, and secure the service.
• For legal and safety reasons — when required by law or necessary to protect our users, the public, or the service.

We rely on a small number of third-party providers who act as data processors on our behalf, including services for hosting and databases, email delivery, real-time messaging, file storage, and privacy-friendly analytics. Each processes data only as needed to deliver its part of the service.

We use essential cookies and local storage to keep you signed in and to remember preferences such as your theme. We do not use advertising or cross-site tracking cookies.

We keep your information for as long as your account is active. When you delete your account, we remove your profile, posts, messages, and connections. We may retain a limited amount of data where necessary to comply with legal obligations or to enforce safety measures, such as records of bans.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage much of this directly from your settings, or contact us at orbit@niso.moe to exercise your rights.

We protect your data with measures such as password hashing, encryption in transit, and access controls. No method of transmission or storage is ever completely secure, but we work to protect your information and continually improve our safeguards.

Orbit is not intended for children under 13, or under the minimum age required in your country. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will remove it.

Your information may be processed in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected in line with this policy and applicable law.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

If you have any questions about this Privacy Policy or how we handle your data, contact us at orbit@niso.moe.