Privacy Policy

Last updated: May 30, 2026

At ChatSpark, we take your privacy seriously. ChatSpark is a real-time messaging application that allows users to engage in one-to-one conversations and share code snippets with syntax highlighting. This policy explains what information we collect, how we use it solely to provide the messaging service, and how your conversations are protected using AES-256-GCM encryption at rest and HTTPS/TLS encryption in transit.

Information We Collect

Account Information

When you sign up using Email/Password, Google OAuth, or GitHub OAuth, we collect your email address, name, username, and profile picture. This is required to create your account and identify you to other users on ChatSpark.

Messages and Code Snippets

We store your one-to-one conversation history in our MongoDB database, which includes your text messages and shared code snippets. This allows you to access your chat history across different devices.

Device and Connection Data

When you connect to our real-time WebSocket servers, we temporarily process your IP address and connection details to maintain your active messaging session.

How We Use Your Information

Providing the Service

We use your information exclusively to operate ChatSpark. This includes authenticating your login, delivering real-time messages via WebSockets, and securely syncing your conversation history.

Communication

We may use your email address to send essential service-related notices, such as account recovery instructions or password resets.

Data Sharing and Disclosure

Infrastructure Providers

We host ChatSpark on third-party cloud infrastructure providers (such as Vercel and cloud-hosted MongoDB). These providers process your encrypted data strictly on our behalf to keep the application running.

Legal Requirements

We may disclose your information if legally required to do so in response to a valid court order, subpoena, or other legal process.

Data Security

Encryption in Transit

All data transmitted between your browser and our Node.js backend servers is protected using HTTPS/TLS encryption.

Encryption at Rest

Before being saved to our MongoDB database, the content of your messages and code snippets is securely encrypted using AES-256-GCM. We never store your message content in plain text.

Your Rights and Choices

Managing Messages

You can unsend or delete your own messages within your conversations at any time.

Account Deletion

You can request the complete deletion of your account and associated data by contacting us. Once processed, your account and messages will be permanently removed from our active database.

Cookies and Authentication

Authentication Cookies

We use strictly necessary cookies to keep you logged in. These cookies are required for ChatSpark to securely verify your identity as you use the application. We do not use tracking or advertising cookies.

Contact Us

Questions and Requests

If you have any questions about this Privacy Policy, the ChatSpark service, or if you would like to request account deletion, please contact: Ashish Kumar Email: ashishk.codes@gmail.com

By using ChatSpark, you agree to the collection and use of information in accordance with this policy. If you have any questions, please contact us.