Last updated: August 11, 2026
VaultChats ("we," "us," or "the platform") is an invitation-only private messaging and community product operated by its platform owner. This Privacy Policy explains what information we collect, how we use it, who can see it, and the choices you have. By activating an account or browsing the public areas of the site, you accept the practices described here.
Account information. When you are invited or self-register, we record the email address you use to sign in, an anonymous display name of your choosing, an optional phone number, and an optional avatar. Your login PIN and the optional emergency wipe PIN are stored as one-way hashed values that cannot be reversed back to the PIN you typed.
Device and sign-in activity. Each new device you sign in from is held for admin approval before it can open your vault. We record the device label and the timestamp of successful sign-ins, and we count consecutive failed PIN attempts for your account's protection.
Messages and content you create. Direct messages, group space posts, orders you place, gameplay logs, and the digital products you purchase are stored in the platform database. Photographs and other media you upload are stored on the platform's file storage and referenced by URL.
Location for delivery. While an order you placed is in progress, the app may capture your device GPS coordinates and the delivering staff member's coordinates to compute an estimated arrival time. We do not display your visual map location to other members.
Analytics and usage. We track aggregate events such as link shares, ad watches, and feature interactions to improve the product. These events do not include the body of your private messages.
The platform uses cookies and local storage to keep you signed in, remember your selected display name, and persist your device identifier so admin device approval works seamlessly across sessions.
Third-party advertising. We use Google AdSense to display ads in the Watch-Ads panel and other sponsored surfaces. Google AdSense and its partners may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising by visitingGoogle Ads Settingsor by following the instructions ataboutads.info/choices. Third-party vendors and ad networks that serve ads on the platform are separate controllers of any cookies they set; their privacy and cookie policies govern that data.
When you choose to watch an ad in exchange for in-app tokens, we log the watch, the seconds viewed, the reward credited, and an estimated revenue amount so the platform's revenue-share pool can be computed transparently.
Access to your data is enforced by row-level security rules. Other members cannot read your direct messages, your orders, or your private profile fields. The platform owner and the administrators they delegate can read the rows needed to operate, moderate, and bill the service. Account suspensions and emergency wipes restrict access automatically.
Your login PIN, your emergency wipe PIN, and the optional pinned-reset token are one-way hashed. The emergency wipe PIN, when entered, irrevocably destroys your account data — keep it separate from the 4-digit login PIN.
Other members see only the anonymous display name you chose. They do not see your email, your real name, your phone number, or your identity tied to your orders unless you choose to share them.
Invitations and referrals are recorded so the platform can credit the member whose link brought you in. That association is visible to the referring member as a joined-through-your-link count and to the platform owner in admin tooling.
You may edit your anonymous display name (subject to platform-wide profile-editing locks the admin can enable), change your login PIN through the forgot-PIN flow, and trigger an emergency wipe of your account data at any time with your 6-digit wipe PIN.
To request a copy of your stored data, correct it, or permanently delete your account, contact the platform owner through the Help page. Termination requests are honored within a reasonable window after the manual review described in the Terms of Service.
The platform is not directed to anyone under the age required to enter into a binding contract in their jurisdiction. Activation requires age confirmation, and we do not knowingly collect personal information from someone who has not confirmed eligibility. If you believe a minor has registered, contact the owner through the Help page so the account can be removed.
When this policy changes, the date above is updated and significant changes are surfaced through in-app notices or the Help channel. Continued use after a change means you accept the revised policy.
Questions about this policy can be sent to the platform owner through theHelp pageor by signing in and using the in-app Contact the Owner feature.