What we store
Plain language, no legalese. This list is meant to match exactly what's in our database — if something here looks wrong or out of date, please tell us.
What we do store
A one-way hash of your recovery phraseWe never store the phrase itself — only a hash used to verify it when you recover your account. It can't be reversed back into your phrase.
Your display nameRandomly generated when you create your identity (e.g. "Curious Falcon"). Premium members can change it.
An avatar photoOnly if you're a Premium member and choose to upload one. Free accounts have none.
Premium status & expiryWhether you have Premium and when it runs out, if applicable.
Your referral code, and who referred youUsed only to credit free Premium time — never shown to anyone else.
18+ confirmation timestampWhen you accepted the age requirement, so it's not asked again.
Cosmetic display preferenceAn optional, purely cosmetic label choice — never used for matching, ranking, or access control.
Incognito preferenceWhether your name is masked to others as "Anonymous Listener #NNNN".
Chat messages you sendEncrypted at rest (AES-256-GCM) — not stored as plain text. This is server-held encryption, not full end-to-end encryption: the server still holds the key so moderators/automated moderation can act on abusive content. Each message is automatically deleted 4 hours after it's sent.
Which stations you've joined, and whenJoin/leave timestamps and your role (listener/speaker/moderator) in each station, so things like session continuity and moderator eligibility work.
Moderator actions taken against your accountIf a moderator bans or mutes you, or our automated content filter times you out for repeated inappropriate chat messages, that action and the reason are recorded (see the audit log).
What we deliberately don't store
- Your email address or phone number — we never ask for either.
- Your IP address — used only transiently, in memory, to rate-limit abuse; never written to our database.
- Any payment information — StationTalk has no real payment processor today.
- Your microphone/camera audio or video — calls are relayed live, never recorded.