How Prism handles — and mostly doesn't handle — your information. Written to be read, not just filed away.
Prism ("Prism", "we", "us", or "our") is a community chat application operated as part of wearegays.net. This Privacy Policy explains what happens to information when you use the Prism application located at wearegays.net/chat (the "Service").
For the purposes of the EU and UK General Data Protection Regulation (where applicable), the operator of wearegays.net is the "data controller" for the limited processing described in this policy. Because Prism is designed to keep your data on your own device, the amount of personal data we act as controller for is intentionally minimal.
This policy applies only to the Prism Service at wearegays.net/chat. It does not cover:
By using the Service, you acknowledge the practices described here. If you do not agree, please do not use the Service.
Prism is built to collect as little as technically possible. Here is the complete list.
Prism is a shared, real-time chat room. When you send a message (or a reaction, or an edit), it is transmitted over an encrypted connection to our chat server, which relays it to everyone else currently in the room and keeps it in a short rolling history. This means:
Your chosen name and color are also saved in your browser's localStorage so you don't have to re-enter them each visit.
When the app loads, Prism performs a one-time lookup of your approximate country to determine whether the Service is available in your location (see Section 12). To do this, your browser makes a request to one or more third-party IP-geolocation providers. That request necessarily exposes your IP address to the provider, which returns a country code (for example, US, DE, GB).
What we keep: only a small flag in your browser (prism.region.ok) recording that the check passed, so we don't have to repeat it. We do not store your IP address, and the country result is not sent to our own servers.
Like virtually all websites, the web server that delivers the Prism files may automatically record standard technical request data — such as IP address, timestamp, requested file, browser user-agent, and referring page — in transient logs used for security, abuse prevention, and reliability. These logs are not used to build advertising or behavioral profiles.
If you attach an image in a message, that image is read by your browser and stored locally as part of your message data. It is not uploaded to us.
To be explicit, Prism does not:
The limited information described in Section 3 is used only to:
| Purpose | Data involved |
|---|---|
| Run the app for you (show your messages, profile, settings) | Local browser storage |
| Determine regional availability and comply with the law | IP address → country code (via provider) |
| Keep the Service secure and prevent abuse | Transient server logs |
| Remember your choices between visits | Local browser storage |
We do not use your information for automated decision-making that produces legal or similarly significant effects about you, other than the geographic availability gate described in Section 12.
If you are in the European Economic Area, we rely on the following legal bases under Article 6 of the GDPR:
Data lives in two places:
| Where | Contains | Retention |
|---|---|---|
| Our chat server | A rolling window of recent room messages (with the sender's chosen name & color and a timestamp); the list of who is currently connected | Recent messages only; older messages age out. Presence disappears the moment you disconnect. |
Your browser (localStorage) | prism.profile.v3 — your chosen display name & color; prism.region.ok — a single flag that skips repeat region checks | Until you clear your browser storage |
To clear the data in your browser, clear site data for wearegays.net in your browser settings. To have your recent messages removed from the server sooner than they naturally age out, contact us (Section 20).
Prism does not set advertising or tracking cookies. It uses localStorage (described above), which is strictly necessary to provide the Service you request and to remember your preferences. Because these technologies are essential and are not used for tracking, they generally fall outside the consent requirements applicable to non-essential cookies. Your browser lets you block or clear local storage at any time; doing so will reset the app.
The only routine third-party contact Prism makes is the region check. Depending on availability, your browser may contact one of the following geolocation providers, each of which has its own privacy policy governing what it does with the request:
We do not control these providers and are not responsible for their practices. We send them no more than the network request itself requires (which necessarily includes your IP address) and we do not share your name, messages, or other profile data with them.
We do not sell your personal information. We may disclose limited technical information (such as server logs) only when we believe in good faith that it is necessary to:
Because we keep only a small rolling window of recent messages and no account or contact details, the information we could ever disclose is minimal, and older messages are gone entirely.
The Service is served exclusively over HTTPS and ships with a strict Content Security Policy that restricts where scripts, styles, and network connections may originate, reducing the risk of injection attacks. All communication with the chat server runs over an encrypted (WSS/HTTPS) connection.
Please note: data stored in your browser is only as secure as the device and browser you use. Anyone with access to your unlocked device may be able to view your local Prism data. No method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Prism is not available to users located in the United Kingdom. When the app loads, we check your approximate country. If we determine that you are accessing the Service from the United Kingdom (country code GB), you will be shown a notice and access to the Service will be blocked.
This restriction reflects the regulatory environment applicable to online user-to-user communication services in the UK — including obligations arising under the UK Online Safety Act 2023 — which this demo Service is not configured to meet. The block is applied automatically based on the country returned by the geolocation check described in Section 3.2.
Geolocation is approximate and can occasionally be inaccurate (for example, when using a VPN or certain corporate networks). Attempting to circumvent the regional block does not create any right to use the Service, and continued attempts to bypass availability controls may be treated as a violation of our Terms of Service.
The geolocation providers we contact may process the request (including your IP address) on servers located outside your country, including in the United States. Where such transfers involve personal data subject to the GDPR, the relevant provider is responsible for maintaining an appropriate transfer mechanism. Because we transmit no profile or message content to these providers, the transfer is limited to what a routine network request inherently exposes.
Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, restrict, or object to processing, and the right to data portability. Because Prism collects so little, most of these are easy to exercise:
For anything we hold that you cannot reach yourself (such as server logs), contact us using Section 20. You also have the right to lodge a complaint with your local data protection authority.
The Service is not directed to children under the age of 13 (or the higher minimum digital-consent age in your jurisdiction, such as 16 in parts of the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps.
If you are a California resident, you have the right to know what personal information is collected, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising. You will not be discriminated against for exercising your rights.
Because Prism does not track users across websites or over time, there is nothing for a "Do Not Track" signal to disable. We honor the spirit of these signals by simply not tracking you in the first place.
We may update this Privacy Policy from time to time to reflect changes in the Service, technology, or the law. When we do, we will revise the "Last updated" date at the top. Material changes will be highlighted within the Service where practical. Your continued use after an update means you accept the revised policy.
Questions, requests, or concerns about this Privacy Policy or your data can be directed to:
wearegays.net
Attn: Privacy — Prism
Email: [email protected]
We aim to respond to genuine privacy requests within 30 days.