> How Chatwing embedded group chat processes conversation data, which cookies it sets, what US transfers involve and when consent is required.
>
> Canonical: https://www.flowconsent.com/en/services/customer-support/chatwing

Customer support

# Chatwing

Preferences · [Official website](https://chatwing.com)

Chatwing is a US-based group chat and community chat platform that can be embedded on websites to create live chat rooms and community discussions. It sets third-party cookies and processes conversation and user data on US infrastructure. As a group chat tool, conversations may include personal data shared by multiple participants, making transparency about data processing and US transfers particularly important.

[Block Chatwing until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=customer_support) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Customer support](https://www.flowconsent.com/en/services/customer-support)

- Consent

  Preferences

- Prior consent

  Required

- Documented cookies

  2

- Third-party domains

  3

- Servers

  United States (Chatwing infrastructure)

Overview

## What does Chatwing do?

## **What is Chatwing?**

Chatwing is a group chat and community messaging platform that can be embedded on websites to create live chat rooms, community forums, and event-based discussions. It allows multiple users to participate in real-time conversations on a shared public or moderated chat interface. Chatwing is used by community websites, gaming platforms, media outlets, and event organisers to create interactive chat experiences.

## **What data does Chatwing collect?**

Chatwing collects chat message content, usernames or display names, IP addresses, browser and device information, and session identifiers. For social login, it may receive profile data from Facebook, Google, or other OAuth providers. Chat logs are stored on Chatwing's US servers and may include any personal data voluntarily shared by participants in public or semi-public chat rooms.

## **GDPR implications for group chat**

Group chat raises specific GDPR considerations because multiple individuals' personal data may be included in the same conversation log. The organisation embedding Chatwing is the data controller for the chat room and is responsible for ensuring a lawful basis for all participant data processing, implementing appropriate retention limits, and enabling participants to exercise their data rights.

## **Consent requirements**

Consent is required before the Chatwing widget loads. The consent notice must inform participants that their chat messages will be stored on US servers and who may access them. Participants must be informed of the public or semi-public nature of the chat room before entering personal data.

## **Data transfers outside the EU**

Chatwing is a US company. All chat and user data is processed on US infrastructure. Standard Contractual Clauses apply. Sign Chatwing's DPA and document the US transfer.

## **Practical compliance steps**

Obtain consent before loading the widget. Inform participants that chat messages are publicly visible and stored in the US. Sign a DPA with Chatwing. Configure chat log retention limits. Update your privacy policy. Document the US transfer in your RoPA.

Compliance

## Chatwing and the GDPR

Chatwing is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Consent (Art. 6(1)(a) GDPR) for tracking cookies and conversation data collection. Legitimate interest (Art. 6(1)(f)) may apply for conversation data when a user actively participates in a chat.

- Risk level

  medium

- Applicable regulations

  GDPR, ePrivacy Directive, UK GDPR

### Impact assessment (DPIA)

A DPIA is advisable when Chatwing is used to host community discussions at scale where sensitive personal data may be shared by participants, or when chat logs are retained and linked to user profiles for extended periods.

### Sample text for your banner

> We use Chatwing to provide a live chat room on this website. Chatwing processes chat conversation data and user identifiers on servers in the United States. Please accept to enable the chat room.

Cookies and trackers

## What Chatwing sets and contacts

- Tracking method

  JavaScript chat widget, third-party cookies, server-side conversation and user data processing

- Server location

  United States (Chatwing infrastructure)

- Data transferred outside the EU

  Chatwing is a US-based group chat and community chat platform. All conversation and user data is processed on US infrastructure. Transfers rely on Standard Contractual Clauses under GDPR Article 46.

### Cookies set (2)

| Name        | Type       | Duration | Purpose                                                                 |
| ----------- | ---------- | -------- | ----------------------------------------------------------------------- |
| cw\_session | session    | Session  | Session identifier used to maintain the active Chatwing chat room state |
| cw\_uid     | persistent | 1 year   | User identifier used to recognise returning chat participants           |

### Third-party domains contacted (3)

- `chatwing.com`
- `api.chatwing.com`
- `cdn.chatwing.com`

Questions

## Frequently asked questions about Chatwing

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does Chatwing set?

Chatwing sets session and functional cookies plus potential third-party tracking cookies to maintain the chat room state and identify returning users. These require ePrivacy consent before the widget loads.

### Does Chatwing require consent under GDPR?

Yes. Consent is required before the Chatwing widget loads. Participants must be informed that their messages will be stored on US servers and may be visible to other participants and moderators. The public nature of group chat means special transparency obligations apply.

### What is the legal basis for using Chatwing?

Consent (Art. 6(1)(a)) for tracking cookies. For conversation data, legitimate interest (Art. 6(1)(f)) may apply when users voluntarily participate in a public chat room, with a documented balancing test. For moderated community discussions requiring identity verification, contract performance may apply.

### Does Chatwing transfer data outside the EU?

Yes. Chatwing is a US company and processes all chat and user data on US infrastructure. Standard Contractual Clauses apply. Sign a DPA with Chatwing and document the US transfer in your RoPA.

### Do I need a DPIA for Chatwing?

A DPIA is advisable when Chatwing is used for large-scale community discussions where sensitive personal data may be shared, or when chat logs are retained and profiled over extended periods. Standard widget chat deployments have a lower risk profile.

### How do I implement Chatwing in a GDPR-compliant way?

Obtain consent before loading. Inform participants that messages are publicly visible and stored in the US. Sign a DPA with Chatwing. Set maximum chat log retention periods. Update your privacy policy. Moderate the chat to prevent sharing of sensitive personal data.

### Are there EU-hosted alternatives to Chatwing?

Rocket.Chat can be self-hosted on EU infrastructure for community chat. Matrix.org/Element provides federated, self-hostable chat with EU data options. For simpler embedded chat, Tawk.to has EU data processing. Crisp.chat (France) provides both live chat and community chat features.

### How do I manage participant data subject rights in a group chat?

For access requests, export the chat logs containing the individual's messages. For erasure requests, anonymise the requesting participant's messages (replace name and ID with an anonymous identifier) rather than deleting entire conversation threads. Ensure the Chatwing admin panel supports message anonymisation or contact Chatwing support for data deletion procedures.

Same category

## More services: Customer support

[See the whole category](https://www.flowconsent.com/en/services/customer-support)

### [Buttonizer](https://www.flowconsent.com/en/services/customer-support/buttonizer)

[Buttonizer is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Buttonizer integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Buttonizer helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/buttonizer)

[Marketing](https://www.flowconsent.com/en/services/customer-support/buttonizer)

·

### [Sleekplan](https://www.flowconsent.com/en/services/customer-support/sleekplan)

[Sleekplan is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Sleekplan supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Sleekplan ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/sleekplan)

[Preferences](https://www.flowconsent.com/en/services/customer-support/sleekplan)

·

### [Bookitit](https://www.flowconsent.com/en/services/customer-support/bookitit)

[Bookitit is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Bookitit integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Bookitit helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/bookitit)

[Preferences](https://www.flowconsent.com/en/services/customer-support/bookitit)

·

### [Droxy](https://www.flowconsent.com/en/services/customer-support/droxy)

[Droxy is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Droxy integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Droxy makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/customer-support/droxy)

[Preferences](https://www.flowconsent.com/en/services/customer-support/droxy)

·

### [Bookly](https://www.flowconsent.com/en/services/customer-support/bookly)

[Bookly is an online scheduling and booking platform that enables businesses to automate appointment management and reduce no-shows. It provides a customizable booking interface, calendar synchronization, and automated reminders via email and SMS. Bookly supports multiple service types, staff scheduling, and payment collection. With timezone detection and availability management, Bookly simplifies scheduling across any industry and business size.](https://www.flowconsent.com/en/services/customer-support/bookly)

[Preferences](https://www.flowconsent.com/en/services/customer-support/bookly)

·

### [Tidio](https://www.flowconsent.com/en/services/customer-support/tidio)

[Tidio is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Tidio integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Tidio helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/tidio)

[Preferences](https://www.flowconsent.com/en/services/customer-support/tidio)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)
