Privacy Policy

1. Overview

This Privacy Policy describes how 727ave.com collects, uses, and protects data from users of the 727ave.com/call browser calling service. We are committed to your privacy. No account, email address, or real name is ever required.

2. What We Collect

Data	Why	Stored How
IP address (hashed)	Security, rate limiting, abuse prevention	SHA-256 hash only — raw IP never stored
City and country	Directory display, language detection	MySQL database
Browser fingerprint (hashed)	Unique session identity per device/browser	SHA-256 hash only
Cookie ID (random)	Session continuity across visits	Browser cookie + MySQL
Display name (chosen or auto-generated)	Directory and call identification	MySQL database
Online status and last seen timestamp	Directory display	MySQL — auto-updated
Messages (160 chars max)	Call me back / schedule requests	MySQL — deleted after read
Call log (duration, status)	Missed call display	MySQL — 30 day retention
Consent timestamp	GDPR / PIPEDA compliance record	MySQL database

3. What We Do NOT Collect

• Real name
• Email address
• Phone number
• Payment information
• Raw IP address (we store only a one-way hash)
• Call audio content (calls are peer-to-peer — audio does not pass through our servers)
• Location beyond city and country level

4. How Calls Work

Voice calls are peer-to-peer using WebRTC technology. Audio streams travel directly between your browser and the other caller's browser. Audio content does not pass through 727ave.com servers. Only the call signaling (connecting the call) passes through PeerJS infrastructure.

5. Cookies

We set one session cookie (cid727) on your device when you accept the consent dialog. This cookie contains a random identifier used to maintain your identity across sessions. It does not contain your IP address or any personal information. The cookie expires after 365 days and can be deleted at any time by clearing your browser cookies.

We also set a language preference cookie (lang727) to remember your language choice.

6. Third Party Services

• PeerJS / PeerJS Cloud — used for WebRTC call signaling. Your slug/display name is shared with PeerJS to route calls. See peerjs.com for their privacy policy.
• ip-api.com — used to detect city and country from your IP address. Free tier, no personal account. See ip-api.com for their privacy policy.
• Google Analytics — used for aggregate site traffic analytics. See Google's privacy policy.
• Google AdSense — used to display advertisements. See Google's privacy policy.

7. Data Retention

• User session records — kept while active, marked offline after 6 minutes of inactivity
• Call logs — 30 day retention then automatically deleted
• Messages — deleted after being read
• Consent records — kept for legal compliance

8. Your Rights (GDPR / PIPEDA)

You have the right to:

• Request deletion of your session data — contact us using the form below
• Request information about what data we hold — contact us
• Opt out of directory listing at any time using the checkbox in the app
• Delete your cookie at any time by clearing browser cookies — this removes your session identity

To exercise your rights please use our contact form and include the display name associated with your account.

9. Security

We implement the following security measures:

• HTTPS enforced on all pages
• IP addresses stored as one-way hashes only
• Rate limiting on all API endpoints
• Input sanitization on all user-submitted content
• Profanity filtering on display names
• User reporting and blocking system
• Auto-hide of reported users after threshold
• Secure, httpOnly cookies with SameSite protection

10. Children

This service is not directed at children under the age of 18. We do not knowingly collect data from children under 18. If you believe a child under 18 has used this service please contact us for data deletion.

11. Prohibited Use & Law Enforcement

727ave.com/call is provided for lawful personal communication only. The following are strictly prohibited:

• Criminal activity of any kind
• Harassment, threats, or abuse of other users
• Distribution of illegal content
• Impersonation or fraud
• Any activity violating local, national, or international law

We comply with all applicable laws and regulations across all jurisdictions, and support the principles of the United Nations in promoting human rights, dignity, and lawful conduct online.

We cooperate fully with law enforcement agencies when presented with valid legal requests, court orders, or warrants. Session hashes, consent records, and call logs may be disclosed to authorities when legally required.

727ave.com will not aid, abet, facilitate, or knowingly allow the use of this service for any criminal activity under any circumstances.

We reserve the right to immediately terminate access for any user suspected of violating these terms without notice.

12. Changes to This Policy

We may update this privacy policy from time to time. Continued use of the service after changes constitutes acceptance of the updated policy. The effective date at the top of this page will be updated.

13. Contact

For privacy inquiries please use our contact form on 727ave.com.

Governing jurisdiction: Canada (PIPEDA compliant).

← Back to 727ave.com/call