YOUR DATA, IN PLAIN LANGUAGE
Privacy & session data
Winkora uses a browser session rather than an email account for chatting. This notice describes the current app, including its limitations.
What the app stores
Your nickname, optional bio and profile portrait, self-reported age and gender, selected interests, matching preferences, friend requests, friendships, chat invitations, chat memberships, messages, uploads, reports, blocked-content evidence, moderation decisions and blocks are stored on the server. A session cookie keeps you signed in for up to 7 days. A hashed connection identifier is used for rate limits and temporary abuse restrictions. Hosting providers may also keep operational request logs.
Who can see what
Current private-chat participants see your nickname, age, gender, interests, bio and approved portrait. Portrait files require a current shared chat, your own session, or moderator access. Portraits are not displayed in the public lobby. Invited participants see only messages and attachments from their new private conversation; lobby messages are visible to all joined users. Private media URLs require a valid participant session, except for separately approved shared excerpts served through revocable shared-post links. Private-chat media is delivered without advance review. Moderators can view and review all uploaded pictures and videos in a private moderation feed, even if nobody reports them. The owner can open any stored private or lobby conversation to review messages and attachments, including unreported messages, without joining as a participant. Moderators can also review reported or automatically flagged text, including blocked attempts. Profile portraits are reviewed before other users can see them. These chats are not end-to-end encrypted.
Likes and shared conversations
Likes use nickname sessions in this trial, not verified accounts. We store who liked whom and a hashed connection identifier to limit duplicate likes. Counts exclude expired or suspended sessions. Likes provide a capped matching preference among compatible people. A shared conversation contains only selected messages and media, and requires approval from every participant before other joined users can view it. The request fixes nickname and portrait visibility, selected content, and duration. Visible profiles accept friend requests from viewers; hidden profiles do not expose a profile link. Hidden names do not anonymize faces, voices, text, or other identifying details. Posts are excluded from search indexing, but viewers can still copy or capture them. Any participant can withdraw the post while their session remains accessible. Posts expire after the chosen hour, day, or week, or earlier when a participant session expires. Unapproved requests expire within 24 hours. Deleting your session withdraws your shared posts and removes your likes. Clearing cookies loses access to your session and its removal controls. Removal prevents future access through the app but cannot recall copies already saved by viewers. Moderators can review and remove shared posts. Reports remain subject to the moderation retention described below.
Deleting your session
Use “End & delete session” in the app to remove your messages, uploads, friendships and memberships and end your current private conversation. Your profile is replaced with a deleted-guest record. Report records, blocked-content evidence and anti-abuse information are retained for moderation. Deleting a restricted session does not immediately lift its connection restriction. Session expiry or clearing your browser cookies does not automatically delete stored messages or uploads; delete the session before clearing cookies if you want to remove them. There is no account recovery.
Automatic moderation
Rule-based checks look for contact sharing, repeated messages and some underage disclosures. No age-verification provider or automated image/voice age estimation is connected. If a rule pauses your session by mistake, use Request a review in the app. Do not upload identity documents.
Cookies and advertising
The app uses an essential session cookie. It currently runs no advertising tracking scripts. Public conversation guides can contain clearly labelled sponsor or affiliate links. Affiliate placements disclose that Winkora may earn commission on qualifying purchases. Clicking a link takes you to a third-party website, which may use cookies to attribute purchases under its own privacy policy. An active direct sponsor can show a five-second message before a received picture opens. Temporary picture-unlock records link your session and the attachment; no chat content is sent to the sponsor. These timers do not prove an ad was watched. Sponsor application business names, emails, websites and proposals are stored for owner review until the owner deletes them. Submitting an application does not publish it or activate advertising. Third-party sites have their own policies. Any future personalized ad service requires an updated notice and the appropriate consent setup before activation.
Reporting a privacy concern
Use the in-app report action for a message or participant. Use “End & delete session” to remove your session data as described above. Reports are reviewed manually; there is no continuous monitoring or guaranteed response time.