How FlashChat Keeps Anonymous Chat Safe
FlashChat refuses illegal content in every chat, moderates public rooms with five checks, scans photos on its own servers and again in the receiving browser, and gives you one-tap skip and report. One-to-one chat messages are never written to a database unless someone reports the chat — they live in server memory and are dropped when the chat ends. This page documents exactly what those protections cover, what data is and is not kept, and where the limits of any moderation system are.
How messages are moderated
Messages in public rooms pass through five checks before they are relayed. Since October 2026 nothing is dropped for its words: language a room does not allow is starred out and delivered, people sending too fast are slowed down, and links outside an allow-list are removed. One-to-one chats with strangers get the same pacing but no word filter or link filter, so don't open links from strangers. Illegal content (child abuse, terrorism, trafficking, sextortion) is refused everywhere, and grooming patterns are flagged for review.
Profanity filter
Whole-word matching in English, Hindi and other Indian languages. Words a room does not allow are starred out (b****) and the message is still delivered; slurs and threats also count as a strike toward a temporary removal.
Flood protection
Per-action rate limits (15 messages per 5 seconds, 2 images per 30 seconds, 5 skips per 10 seconds). A message over the limit waits a few seconds and then sends, so a partner can't be flooded.
Spam detection
Near-identical messages sent in quick succession, and the same line posted across several rooms, are slowed down.
URL allow-list
In rooms, only links to an allow-list of sites (YouTube, Spotify and similar) go through; anything else is replaced with [link removed], which stops Telegram, WhatsApp and shortened phishing links. One-to-one chats do not filter links.
Join velocity
Connection rate limits per device and IP throttle bot signups and stop coordinated abuse swarms before they hit the queue.
Every photo, checked twice
Photos in chats and rooms are checked on FlashChat's own servers as they are delivered, including a match against known child-abuse images, and again by an image classifier in the receiving browser. Flash Card, profile and timeline photos get the same server check. Sexually explicit photos are not delivered; swimwear, short dresses and other photos without nudity are delivered like any photo. No chat image is sent to a third-party service.
What gets stored — and what doesn't
The honest list. Anything not below is not persisted at all.
Stranger chat messages (unless the chat is reported) · video and audio call streams · self-destructing photos after expiry (unless their sender is reported) · voice notes after playback · your IP address in any chat log · any biometric data from the camera.
Your profile and timeline (a random nickname and handle are made on your first visit; avatar or photo, bio, photo strip and wall posts are yours to add) · Flash Cards you publicly post · FlashBuddy connections you've accepted · Saved Chat messages, as end-to-end encrypted ciphertext we cannot read (kept up to 30 days unread, gone within 24 hours of being read) · Room messages, kept as room history · Arcade best scores · a push subscription if you enable notifications · an email, password hash and list of signed-in phones if you choose to keep your account across phones.
Chat session records (both device IDs, start and end time, message count, whether it was reported) · report details (so admins can review), with a reported chat's last 20 lines and up to three recent photos from the reported person (photos kept 180 days) · automated photo-check results · rate-limit counters (expire automatically) · bans for repeat offenders. None of this is shown to other users. Session records are deleted with your account; reports, the photos kept with them and photo-check results are not.
Reporting workflow
The flag button is in the chat header during every chat. Tap it, optionally say what happened, and tap Report & Skip: you move to a new chat at once and the report goes to admin review with the chat's details.
- Illegal content is stopped automatically. Illegal text is refused before it reaches anyone, and a photo matching known child-abuse material is blocked and bans the sender's network address (24 hours, then 7 days on a repeat).
- Everything else is reviewed by a person. Admins can ban a device, and repeat offenders lose the ability to create cards and rooms.
- You can always skip first and report after — skipping is instant and doesn't require waiting for the report flow.
- You can block any user from their Flash Card or profile. Blocking stops future matches, buddy requests, chat invites, and nudges, and hides their content from your feeds — silently, with no notification to them.
Age policy
FlashChat is intended for users aged 18 and above. The Terms of Service prohibit use by minors. We do not currently use facial age estimation (it has a known accuracy ceiling and would require collecting biometric data we deliberately avoid). Instead:
- The Terms make the age requirement explicit at signup-free entry.
- 18+ rooms and the 18+ cards feed require an additional in-app age confirmation, and 18+ card visibility is a per-profile setting enforced server-side. These are self-declarations, not identity verification — we say so plainly rather than pretend otherwise.
- Reports flagging a suspected minor route to admin review with high priority.
- Confirmed-minor accounts are banned.
- Parents and guardians can file takedown requests through the grievance officer.
Legal compliance — IT-Rules 2021
FlashChat operates under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, which apply to all online intermediaries serving Indian users. The compliance surface is public:
- Grievance officer — name, contact, response timelines for content complaints, account issues, and legal requests.
- Monthly compliance report — required by Rule 4(1)(d), published on a rolling basis.
- Content takedown policy — DMCA, CSAM, government-order, and user-request takedown procedures.
- Privacy policy — full data handling disclosure under the Digital Personal Data Protection Act.
- Terms of service — community guidelines, prohibited conduct, account termination policy.
What you should do as a user
Platform safety is half the equation. The other half is the choices you make in the chat itself.
Do
- Use the skip button freely — there's no cost
- Report uncomfortable behaviour
- Add real connections as FlashBuddies for safer re-matching
- End a video call the moment something feels off
- Trust your instinct over flattery
Don't
- Share full name, address, school, or workplace
- Send financial info, OTPs, or login credentials
- Open links from strangers
- Move to other apps because someone "asked you to"
- Send anything you'd be uncomfortable seeing screenshotted
The honest limits of any anonymous chat platform
Moderation is not magic. A determined bad actor can get past any single filter; what platforms can do is stack enough layers that abuse becomes inconvenient and reportable. Here's where FlashChat is honest about the limits:
- Live video can't be classified in real time at our scale — the image classifier runs on still images, not video frames. Video is moderated by reports + skip behaviour, not pre-emptive scanning.
- Audio is similarly not transcribed or scanned. Voice abuse is moderated by reporting after the fact.
- Anonymity protects abusers too, not just users. The trade-off for "no signup" is that bans rely on device + IP signals, which determined attackers can rotate.
- End-to-end encryption covers Saved Chat (buddy messages) — the server stores only ciphertext it cannot read. Stranger chats are not end-to-end encrypted: messages are not stored unless the chat is reported, but they pass through the server in plaintext during relay (required for moderation). Room messages are stored unencrypted as room history.
We're transparent about these because every platform has them and most don't say so.
How to reach us
FAQ
Is FlashChat safe?
Anonymous chat is only as safe as the platform's moderation and your own choices. FlashChat refuses illegal content in every chat, moderates public rooms, checks photos on its servers and again in the receiving browser, and lets you skip and report in one tap. One-to-one chats are not stored unless someone reports them. Combined with sensible behaviour — never sharing personal information with strangers — it's substantially safer than unmoderated alternatives.
Are messages stored?
Not for stranger chats — those live in server memory only during your active session and are dropped when it ends, unless someone reports the chat: then its last 20 lines and up to three recent photos from the reported person are kept with the report for moderators. Room messages are stored as room history, and Saved Chat buddy messages are stored as end-to-end encrypted ciphertext we cannot read: an unread message is kept up to 30 days, a read one disappears within 24 hours of being read.
How does FlashChat handle inappropriate images?
Photos sent in chats and rooms are checked twice: on FlashChat's own servers as they are delivered, including against a list of known child-abuse images, and by an image classifier in the receiving browser. Sexually explicit photos are not delivered; swimwear, short dresses and other photos without nudity are delivered like any photo. No chat image is sent to a third-party service.
What about CSAM?
Zero tolerance. A photo matching known child-abuse material is blocked before delivery and the sender's network address is banned. Anything flagged as possible CSAM, by the checks or by a report, is a critical incident: the device is banned and the case is escalated through the proper legal channels.
Does FlashChat collect my IP address?
Your IP is visible at the network level (every internet service sees this) and is used for rate limiting and abuse prevention. It is never shown in text chat, stored on your profile or written into chat logs. A one-way hash of it is kept with cookie-consent records, and addresses banned for abuse go on a ban list. Any video or voice call can show your IP to the other person, because calls try a direct peer-to-peer connection first.
What is the minimum age to use FlashChat?
18+. The Terms of Service prohibit use by minors. Suspected minors should be reported through the in-chat report button or the grievance officer.
How do I report someone on FlashChat?
Tap the flag in the chat header, optionally say what happened, and tap Report & Skip. You move to a new chat at once and the report goes to admin review with the chat's details. Illegal text is refused automatically, and a photo matching known child-abuse material also bans the sender's network address.
Does FlashChat comply with Indian law?
Yes. FlashChat operates under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, with a published grievance officer, monthly compliance report, content takedown policy, and a defined response timeline for legal requests.
Can law enforcement request user data?
Yes — through the grievance officer, with proper legal process under Indian law. Because stranger chat messages are not stored unless a chat is reported, the data available is limited to what's described in the privacy policy: account profile and timeline (if you created one), Flash Cards (public), room message history, buddy connections, Saved Chat ciphertext (which we cannot decrypt), reports (with what a reported chat kept), and abuse-prevention metadata.
Can I use FlashChat without sharing personal information?
Yes — and we recommend it. Core chat works with zero personal information. Optional features like email recovery and verified profiles are entirely opt-in. Never share full name, address, school, workplace, financial details, or login credentials with strangers, regardless of how trustworthy they seem.