How We Keep Your Account Secure

No website can promise zero risk, and we won't pretend to. Here's what we actually do to protect your account and chats, and what you can do on your side.

Your account and login

You don't need a social media profile or email to use Stranger Talk. You get an ST code, and you can add a 4-digit PIN to come back to the same account. We store only a scrambled (hashed) version of your PIN, never the PIN itself. Your login lives in a secure, HTTP-only cookie, and we check it on our server every time. Too many wrong PIN tries will lock PIN login for a while.

Your part: never share your PIN or any login code with anyone, not even someone claiming to be from Stranger Talk.

Chats and community

Every chat and community space has report and block buttons, so you can leave an unpleasant conversation in one tap and flag people who break the Community Guidelines. Before showing messages or accepting a report, we check that you're really a member of that room. Some actions are rate-limited to slow down spam.

Chats are not end-to-end encrypted, so don't send anything you wouldn't want stored online.

Location, without GPS

Area Chat works with the country, state and city you choose. We never ask for GPS. Travel Chat matches you by the train you pick. Still, keep your live location, coach and seat number to yourself.

Admin access

Admin tools are kept separate from the public site, hidden from search engines, and only the Stranger Talk team can use them.

Collecting only what we need

We try to keep only what's needed to run the features, keep people safe and keep the site working. Our Privacy Policy lists exactly what that is.

Found a security issue?

Thank you for looking out. Email strangertalk.in@gmail.com with "Security" in the subject and enough detail for us to reproduce it. Please don't post exploit details or anyone's private information publicly while we fix it.