Privacy Policy - Camsurf Zero-Log Architecture & Data Protection

1. Zero-Log Architecture

At Camsurf, we firmly maintain that the finest privacy policy is grounded in data minimization. When you interact on camsurf, our system does not maintain permanent logs of your conversation partners, topics discussed, or geographic coordinates. We operate under a strict zero-knowledge architecture designed so that unauthorized third parties—and even our own internal developers—cannot retroactively inspect past video interactions.

No Video Footprints Kept

Live camera video and audio feeds pass directly between client browsers via peer-to-peer WebRTC connections. No intermediate media server records, stores, or archives the visual contents of your spontaneous meetings.

2. Data We Deliberately NEVER Collect

Unlike traditional social networks that harvest personal telemetry to construct advertising dossiers, camsurf deliberately refuses to collect:

Your real legal name, physical home address, or government identification numbers.
Your telephone contacts, phone numbers, or synchronized address book lists.
Permanent video recordings, audio transcripts, or chat logs of private one-on-one sessions.
Financial bank details or credit card information for guest connections.

3. Minimal Information Collected

To operate our matchmaking service, prevent denial-of-service incursions, and enforce community safety, we process minimal operational telemetry:

Ephemeral Connection Data: Hashed IP addresses used for geolocation routing and anti-abuse filtering, which are discarded or anonymized after short retention cycles.
Account Credentials (Members Only): If you choose to register a profile via the Member Portal, we store your chosen email address and an Argon2-hashed password string.
Trust & Safety Snapshots: When an active user flags a stream for illegal content, an encrypted visual snapshot of that specific flagged moment is routed to our human moderation team to verify bans.

4. WebRTC Peer-to-Peer Cryptographic Security

When you press "Start" on camsurf, media data is transmitted using WebRTC (Web Real-Time Communication). WebRTC incorporates mandatory Datagram Transport Layer Security (DTLS) and Secure Real-time Transport Protocol (SRTP). This ensures that video and audio streams are encrypted end-to-end between peer devices, preventing eavesdropping and packet sniffing along internet routing paths.

5. Your Global Rights (GDPR & CCPA Compliance)

Depending on your physical jurisdiction (including the European Economic Area, United Kingdom, and the State of California), you possess legally enforceable statutory rights regarding your personal information:

Right to Erasure ("To Be Forgotten"): You may request the permanent destruction of all account hashes and stored tokens at any moment.

Right of Data Portability: Obtain an exportable JSON transcript of your account configuration and preferences.

Do Not Sell My Info: Camsurf never sells, rents, or commercializes personal data to third-party data brokers.

Right to Restrict Processing: Limit how your account telemetry is utilized during open administrative investigations.

6. Data Retention & One-Click Deletion

Registered members on camsurf can initiate instantaneous account deletion inside their profile dashboard under "Security & Privacy". Executing this command irreversibly purges your email address, preferences, and verified status from our edge storage clusters within sixty (60) seconds.

7. Technical Safeguards & TLS 1.3

All HTTP traffic across camsurf is enforced over TLS 1.3 with automated HSTS preloading. We conduct regular penetration tests, maintain firewall rules against automated scraping, and isolate backend microservices within private VPCs.

Privacy Policy & Information Security

Privacy Topics