Legal // privacy
Privacy Policy
This policy describes how WhiteTeam Messenger handles personal data when the service is used, including registration, authentication, profiles, channels, groups, and messages.
1. Operator
The operator of this messenger service is WhiteTeam Messenger, operating the service at whiteteam.su. The operator is the entity responsible for processing personal data in connection with the activities described by this policy.
2. Data we collect
We collect data needed to provide the service:
- Account and verification data: personal email address, callsign or username, password hash, verification code hash, verification attempts, and related timestamps.
- Profile data: display name, biography, avatar, locale, and related account preferences.
- Communication data: chat membership, roles, messages, read receipts, presence, typing indicators, and channel metadata.
- Technical data: session identifier hash, IP address, user agent, and related security logs.
3. Purposes
Data is processed to provide account registration and email verification, authenticate users, maintain profiles, enable messaging and channel/group participation, enforce permissions, and protect the service.
4. Storage and international transfers
Personal data is stored in the PostgreSQL database hosted on the same production server. Email delivery and related verification data may be transferred to an external SMTP provider. Domain name and related infrastructure may be handled by external providers.
5. Retention
Data is retained according to the operational needs of the service, including session expiry, verification expiry, and account maintenance. Retention periods are described by the features in use; no longer periods are applied where not required by the service.
6. Security
The service uses hashed passwords, hashed session tokens, secure cookies, CSRF protection, rate limits, validation, and transport security. Security controls are reviewed and updated as the service evolves.
7. Your rights
Depending on the applicable law, you may have rights to access, correct, delete, restrict, or object to processing of personal data, and to withdraw consent where applicable. Requests should be submitted through the contact channels available in the service.
8. Changes
This policy may be updated as the service, features, or legal requirements change. Material changes should be published before they take effect.