1. Data Controller
OxPulse (oxpulse.chat)
Email: privacy@oxpulse.ru
2. Data Collected
- IP address — temporary, for WebRTC connection establishment
- Signaling data — offer, answer, ICE candidates
- TURN relay metadata
All data is automatically deleted when the call ends.
3. Legal Basis (GDPR Art. 6(1)(f))
Legitimate interest in providing the video calling service.
4. Purpose
Facilitating peer-to-peer video calls between users.
5. Retention
Data is retained only for the duration of the call and automatically purged upon disconnection. No persistent storage of personal data.
6. Cookies & Local Storage
We use localStorage for language preference, device identifier (ox_did),
consent record, and profile state. No tracking cookies, no analytics cookies,
no advertising cookies.
7. Encryption
All media is encrypted using DTLS-SRTP end-to-end between participants.
8. Accounts
No accounts, no registration, no user profiles are created or stored.
9. Analytics
With your explicit consent, we collect anonymous usage events (page_view, room_created, room_joined, call_connected, call_ended, web_vitals, client_error). Analytics events are retained for up to 30 days, then deleted. No data is shared with third parties. Analytics are off by default.
Withdraw consent at any time from the privacy settings page (GDPR Art. 7(3)). Policy version: 2026-05-07.
10. Sale of Personal Information (CCPA)
We do not sell personal information.
11. Children (COPPA)
This service is not directed at children under 13.
12. International Transfers
Signaling may pass through a US-based server. Media traffic is relayed via a TURN server located in Russia.
13. Your Rights (GDPR)
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Since no persistent data is stored, these rights are satisfied automatically.
14. California Residents
You have the right to know, delete, and opt-out of sale of personal information. We do not sell your data.
15. Law-Enforcement Requests (draft — pending legal review)
We can only disclose data that exists. The Service stores no call content, no message history, and no user identity. What can exist at the moment of a request: ephemeral signaling state for calls in progress (purged at hangup) and, only for users who opted in, anonymous aggregate analytics retained up to 30 days. We review every request for legal validity and jurisdiction, and we do not honor informal or extraterritorial demands. Requests: legal@oxpulse.ru.
16. Contact
For privacy inquiries: privacy@oxpulse.ru
17. Updates
We may update this policy. The date of the last update is shown below.
Last updated: May 7, 2026