Privacy Policy

Last updated: 4 November 2026

Who is responsible

Open Ear Collective is the controller for personal data processed through Anontalk at https://anontalk.online. This policy explains our processing under the EU General Data Protection Regulation (GDPR), known in Dutch as the AVG. Anontalk is for people aged 18 and over.

Registered address and registration number: to be published

For privacy questions or requests, please use our contact form.

Information we process

  • Email address, chosen nickname (no real name is needed), password (stored hashed by our sign-in provider) and approximate signup country.
  • Credit balance and purchase history, including whether you paid by card (Stripe) or Google Play.
  • Chat messages, Speed Chat messages, community topics, replies and votes, bottle messages, buddy notes, dilemma votes and arguments, reports and blocks, and support tickets.
  • Reward records: daily fortune claims, Mood SOS completion days and invite referrals.
  • Journal entries and mood check-ins in the Wellness toolkit stay in your browser only and are never sent to us.
  • Only after cookie consent: basic visit statistics (page path, referrer, country and a random visitor ID).

Stored conversations

Chat messages are stored so our team can review conversations for safety, handle abuse reports and improve reply quality. Phone numbers, email addresses, links, social handles and street addresses are automatically masked before messages are saved. Masking may not catch everything, so please do not share identifying details about yourself or others.

Chats are not end-to-end encrypted. A nickname means other users do not see who you are; it does not make you anonymous to the service or its providers.

Chat partner replies are written by real members of our team; no automated replies are used. Team members may keep short notes about details you share in chat (for example your first name, situation, family or health) so they can follow up in later chats. These notes are visible only to our team and are deleted when you delete your account.

Purposes and legal bases

  • Contract: providing your account, conversations, purchases and credits.
  • Legitimate interests: safety review, abuse prevention, security and reply-quality review.
  • Consent: optional statistics and advertising cookies. You can withdraw consent at any time.
  • Legal obligation: keeping required tax and payment records.

Providers and international transfers

  • Lovable Cloud: hosting and database (EU/US).
  • Stripe: card payments.
  • Google: Google Play Billing for in-app purchases; and, only with your consent, Google AdSense advertising and Google Ads measurement (whether a visit from our ads led to a verified account; your account ID is sent so it is counted once). See how Google uses this data. You can withdraw consent any time on the Cookie page.
  • Weglot: page translation.

Where personal data is transferred outside the EEA, we rely on Standard Contractual Clauses. We do not sell personal data.

Retention and account deletion

Your account and stored contributions are deleted when you use Account > Delete account & data. See our account deletion page.

Payment records required by tax law are kept by our payment providers, typically for seven years in the Netherlands.

Your rights and complaints

You may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You can change your cookie choice on our Cookie & Data Statement.

Send requests through the contact form, preferably from your account email. We normally respond within one month.

You may complain to the Dutch Autoriteit Persoonsgegevens or your local supervisory authority.