Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Chatwing is a US-based group chat and community chat platform that can be embedded on websites to create live chat rooms and community discussions. It sets third-party cookies and processes conversation and user data on US infrastructure. As a group chat tool, conversations may include personal data shared by multiple participants, making transparency about data processing and US transfers particularly important.
Chatwing is a group chat and community messaging platform that can be embedded on websites to create live chat rooms, community forums, and event-based discussions. It allows multiple users to participate in real-time conversations on a shared public or moderated chat interface. Chatwing is used by community websites, gaming platforms, media outlets, and event organisers to create interactive chat experiences.
Chatwing collects chat message content, usernames or display names, IP addresses, browser and device information, and session identifiers. For social login, it may receive profile data from Facebook, Google, or other OAuth providers. Chat logs are stored on Chatwing''s US servers and may include any personal data voluntarily shared by participants in public or semi-public chat rooms.
Group chat raises specific GDPR considerations because multiple individuals'' personal data may be included in the same conversation log. The organisation embedding Chatwing is the data controller for the chat room and is responsible for ensuring a lawful basis for all participant data processing, implementing appropriate retention limits, and enabling participants to exercise their data rights.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Consent is required before the Chatwing widget loads. The consent notice must inform participants that their chat messages will be stored on US servers and who may access them. Participants must be informed of the public or semi-public nature of the chat room before entering personal data.
Chatwing is a US company. All chat and user data is processed on US infrastructure. Standard Contractual Clauses apply. Sign Chatwing''s DPA and document the US transfer.
Obtain consent before loading the widget. Inform participants that chat messages are publicly visible and stored in the US. Sign a DPA with Chatwing. Configure chat log retention limits. Update your privacy policy. Document the US transfer in your RoPA.
Websites using Chatwing must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is advisable when Chatwing is used to host community discussions at scale where sensitive personal data may be shared by participants, or when chat logs are retained and linked to user profiles for extended periods.
Sample consent text
We use Chatwing to provide a live chat room on this website. Chatwing processes chat conversation data and user identifiers on servers in the United States. Please accept to enable the chat room.
Third-party domains contacted
chatwing.comapi.chatwing.comcdn.chatwing.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| cw_session | session | Session | Session identifier used to maintain the active Chatwing chat room state |
| cw_uid | persistent | 1 year | User identifier used to recognise returning chat participants |
Chatwing uses cookies for user preferences — inform visitors with a consent banner.
Chatwing sets session and functional cookies plus potential third-party tracking cookies to maintain the chat room state and identify returning users. These require ePrivacy consent before the widget loads.
Yes. Consent is required before the Chatwing widget loads. Participants must be informed that their messages will be stored on US servers and may be visible to other participants and moderators. The public nature of group chat means special transparency obligations apply.
Consent (Art. 6(1)(a)) for tracking cookies. For conversation data, legitimate interest (Art. 6(1)(f)) may apply when users voluntarily participate in a public chat room, with a documented balancing test. For moderated community discussions requiring identity verification, contract performance may apply.
Yes. Chatwing is a US company and processes all chat and user data on US infrastructure. Standard Contractual Clauses apply. Sign a DPA with Chatwing and document the US transfer in your RoPA.
A DPIA is advisable when Chatwing is used for large-scale community discussions where sensitive personal data may be shared, or when chat logs are retained and profiled over extended periods. Standard widget chat deployments have a lower risk profile.
Obtain consent before loading. Inform participants that messages are publicly visible and stored in the US. Sign a DPA with Chatwing. Set maximum chat log retention periods. Update your privacy policy. Moderate the chat to prevent sharing of sensitive personal data.
Rocket.Chat can be self-hosted on EU infrastructure for community chat. Matrix.org/Element provides federated, self-hostable chat with EU data options. For simpler embedded chat, Tawk.to has EU data processing. Crisp.chat (France) provides both live chat and community chat features.
For access requests, export the chat logs containing the individual's messages. For erasure requests, anonymise the requesting participant's messages (replace name and ID with an anonymous identifier) rather than deleting entire conversation threads. Ensure the Chatwing admin panel supports message anonymisation or contact Chatwing support for data deletion procedures.