Last updated: October 2026
Cookie Policy
This Cookie Policy explains how Crosschatter ("we," "our," or "us") uses cookies and similar tracking technologies when you visit our website and use our services. Essential cookies and storage are used because the Service cannot work without them; analytics and personalized advertising are only used if you allow them in our cookie settings.
This policy should be read alongside our Privacy Policy and Terms of Service.
1. What Are Cookies?
Cookies are small text files stored on your device (computer, tablet, or mobile phone) when you visit a website. They help websites remember preferences, maintain sessions, and understand usage patterns.
We also use related browser storage technologies:
- Local Storage: Browser-side persistent key-value storage used for authentication tokens, user preferences, and anonymous profile data. Persists until explicitly cleared.
- Session Storage: Temporary storage cleared when you close the browser tab or window. Used for transient UI state and for the random identifier that groups anonymous analytics events on our public pages.
- IndexedDB / Cache Storage: Used by the browser for offline caching and progressive web app functionality where applicable.
2. Types of Cookies We Use
Essential Cookies
Strictly necessary for the Service to function. These cannot be disabled without breaking core features:
- User authentication and session management (JWT access and refresh tokens)
- CSRF protection tokens to prevent cross-site request forgery
- Express session identifiers for server-side session tracking
- Socket.IO session identifiers for real-time connection management
- Load balancing and server routing
- Cookie consent preference storage
Duration: Session to 30 days (varies by token type)
Functional Cookies
Enable enhanced functionality and personalization. Disabling these may reduce your experience:
- Remembering your chat mode, filter, and matching preferences
- Storing display settings (theme, layout, sidebar state)
- Maintaining your logged-in state across browser sessions
- Storing anonymous user profile data (age, gender, location — locally only)
- Remembering group membership UI state
- Draft message persistence to prevent accidental data loss
- Notification preference settings
Duration: 30 days to 1 year
Analytics Cookies
Help us understand how the Service is used so we can improve it. Data is aggregated and anonymized:
- Counting active users and page views
- Measuring feature engagement (which features are used and how often)
- Understanding navigation patterns and drop-off points
- Identifying technical errors and performance issues
- Measuring match success rates
Duration: Session to 2 years
Our anonymous analytics on public pages (page views, scroll depth, clicks) only run if you allow “Analytics” in our cookie settings.
Advertising Cookies
Set by Google AdSense, which shows ads on parts of Crosschatter. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. These cookies are used to:
- Personalize ads based on your interests (only if you allow “Personalized ads”)
- Limit how often you see the same ad (frequency capping)
- Detect and prevent ad fraud
- Measure ad performance in aggregate
If you turn personalized ads off, you still see ads, but they are non-personalized. Duration: up to 13 months.
Performance Cookies
Optimize the technical delivery of the Service:
- Caching static assets for faster page loads
- Managing WebSocket and Socket.IO connections for real-time chat
- Optimizing WebRTC ICE candidate negotiation for video and voice calls
- Detecting connection quality to adapt streaming settings
Duration: Session only
3. Specific Cookies & Storage We Use
| Name | Purpose | Duration | Type |
|---|---|---|---|
| accessToken | JWT authentication token for API requests | 7 days | Essential |
| refreshToken | Long-lived token used to obtain new access tokens | 30 days | Essential |
| csrf_token | Prevents cross-site request forgery on state-changing requests | Session | Essential |
| connect.sid | Express.js server-side session identifier | Session | Essential |
| io | Socket.IO session identifier for real-time connection continuity | Session | Essential |
| userPreferences | Chat filters, display settings, and theme preferences | 1 year | Functional |
| anonymousProfile | Anonymous user age, gender, location for matching (local only) | 30 days | Functional |
| __gads, __gpi, __eoi | Set by Google AdSense for ad delivery, frequency capping, fraud prevention and (with your consent) personalization. Google may also use cookies on its own domains. | Up to 13 months | Advertising |
Local Storage Keys
| Key | Purpose | Type |
|---|---|---|
| accessToken | JWT token mirrored in local storage for client-side auth checks | Essential |
| Matching filters (selectedInterests, matchingMode, etc.) | Your chat matching filters (location, interests, age, and so on), kept on this device. If you're logged in they're also saved to your account. Our /talk pages can pre-set some of these (for example, the country filter) when you press Start chatting on them. | Functional |
| theme | UI theme setting | Functional |
| draftMessages | Unsent message drafts to prevent accidental data loss | Functional |
| notificationSettings | Push notification preferences | Functional |
| spotifyDisplayCache | Temporarily cached currently-playing track from Spotify (display only) | Functional |
| cc_consent | Your cookie choices (analytics on/off, personalized ads on/off) and when you made them. Kept until you clear site data. | Essential |
| cc_landing_sid | Session storage, not local storage: a random identifier that groups anonymous usage events on our public pages (page views, scroll depth, button clicks). Not linked to your account; cleared when you close the tab. Only set if you allow analytics, and never if your browser sends Do Not Track. | Analytics |
4. Third-Party Cookies & Services
We use limited third-party services that may set their own cookies or make network requests from your browser:
- Klipy (GIF search): When you search for or view GIFs in chat, requests are made to Klipy's API. Klipy may set cookies or log request data according to their own privacy policy. We do not share personally identifiable information with Klipy.
- Google AdSense: Shows ads on our public pages, beside the chat and after a chat ends. Google and its partners may set and read cookies (see the table above) and receive your IP address and browser details when an ad loads. See how Google uses information from sites that use its services, and manage Google ad personalization in My Ad Center.
- Spotify: If you link your Spotify account for music display, Spotify's OAuth flow may set cookies on their domain. We do not receive or store Spotify authentication credentials.
- Email delivery providers: Our email provider may track email open rates and click-throughs for transactional emails (magic links, password resets). You may opt out by unsubscribing or adjusting email client settings.
- Content Delivery Networks (CDNs): We use CDNs to serve static assets efficiently. CDN providers may log request metadata (IP address, request path) according to their own policies.
Google AdSense is the only advertising network on Crosschatter. We do not use social media tracking pixels. We do not sell your data for money; see our Privacy Policy for how personalized ads are treated under California law and how to opt out.
5. Managing Your Cookie Preferences
Browser Settings
You can control and delete cookies through your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions → Cookies and site data
Clearing Local Storage
To clear local storage data stored by Crosschatter, use your browser's developer tools (F12 → Application → Local Storage) or clear all site data from your browser's privacy settings.
Impact of Disabling Cookies
Blocking or deleting essential cookies and local storage will significantly impact your experience:
- You will not be able to stay logged in between sessions
- Real-time chat features (Socket.IO) may not function correctly
- Your filter preferences will not be saved between visits
- Draft messages will not be preserved
- Some security features (CSRF protection) may be impaired
Disabling functional and analytics cookies has lesser impact and primarily affects personalization and our ability to improve the Service.
6. Cookie Consent
When you first visit Crosschatter, we ask for your choice before using optional storage. You can Accept all, Reject optional, or Choose separately whether to allow anonymous analytics and personalized ads. Essential storage, which the Service needs to work, is always on. Until you choose, no analytics are sent and no ads are requested.
In the EEA, UK and Switzerland, Google's certified consent message may ask for your advertising choices instead; our prompt then only covers our own analytics, and you can reopen Google's message from our cookie settings. If your browser sends a Global Privacy Control signal, personalized ads stay off.
You can change or withdraw your consent at any time by:
- Using the link (also in our footer and in Settings → Privacy)
- Adjusting your browser's cookie settings
- Clearing your browser cookies and local storage
- Contacting us to request data deletion
7. Do Not Track
Some browsers offer a "Do Not Track" (DNT) signal. Crosschatter respects DNT signals where technically feasible by disabling non-essential analytics tracking when detected. Essential cookies required for service operation are not affected by DNT signals.
8. Data Protection Rights
Depending on your location, you may have additional rights related to cookies and tracking:
- GDPR (EU/EEA): Right to informed consent, access, rectification, erasure, portability, restriction of processing, and to object to processing. You may lodge a complaint with your local data protection authority.
- CCPA (California): Right to know what data is collected, right to delete personal data, and right to opt out of the “sale” or “sharing” of personal data. Personalized ads may count as sharing; opt out with the “Do Not Sell or Share My Personal Information” link in our footer. We honor Global Privacy Control signals.
- Other jurisdictions: Additional rights may apply under local privacy laws.
To exercise these rights, contact us at privacy@crosschatter.com.
9. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by posting a notice on our website and updating the "Last updated" date above. Your continued use of Crosschatter after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about our use of cookies or this policy, please contact:
Email: privacy@crosschatter.com
Subject: Cookie Policy Inquiry