Privacy Policy

Vibe Check ("Vibe Check," "we," "us," or "our") operates the party game platform available at vibecheck.mobile and related subdomains. This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you use our website or services (collectively, the "Service").

Questions? Email us at support@vibecheck.mobile.

2.1 Information you provide directly

• Account information. When you create a host account, we collect your email address and a password (stored as a bcrypt hash by our authentication provider).
• Payment information. If you subscribe to a paid plan, our payment processor Stripe collects your credit or debit card number, billing address, and related details. Vibe Check never sees or stores your raw card number — Stripe handles all payment data in accordance with PCI-DSS standards.
• User-generated content. Custom questions, tags, and game configurations you create and store in your account.
• Support communications. If you contact us, we retain a record of that correspondence.

2.2 Information collected automatically

• Player names. Players enter a display name to join a game. This name is stored temporarily for the duration of the game session and is not linked to any persistent account.
• Game and usage data. We log games hosted, player counts, question types selected, and round outcomes to power features like game history and milestone tracking.
• Log data. Our hosting infrastructure (Vercel) automatically records IP addresses, browser type, pages visited, timestamps, and referring URLs when you access the Service.
• Cookies and local storage. We use strictly necessary session cookies to keep you logged in. We do not use advertising or cross-site tracking cookies.

2.3 Information we do not collect

We do not collect your phone number, physical address, government ID, or any sensitive personal data (as defined under GDPR Article 9) unless you voluntarily provide it in a support message.

• Provide the Service. Create and maintain your account, process payments, deliver game sessions, and display game history and milestones.
• Communicate with you. Send transactional emails (password resets, subscription confirmations, receipts). We will only send marketing emails if you have opted in, and you can unsubscribe at any time.
• Improve the Service. Analyze aggregate usage patterns to fix bugs, prioritize features, and improve performance. We do not sell or share individual-level data for this purpose.
• Enforce our Terms. Detect and prevent fraud, abuse, or violations of our Terms of Service.
• Legal compliance. Fulfill obligations under applicable law, respond to lawful requests from authorities, and protect our legal rights.

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract (Art. 6(1)(b)). Processing necessary to provide the Service you signed up for, including account management and payment processing.
• Legitimate interests (Art. 6(1)(f)). Fraud prevention, security monitoring, and aggregate analytics — where these interests are not overridden by your rights.
• Consent (Art. 6(1)(a)). Marketing communications, where you have opted in.
• Legal obligation (Art. 6(1)(c)). Where we are required to process data to comply with applicable law.

We do not sell your personal data. We share information only in the following circumstances:

5.1 Service providers (sub-processors)

• Stripe (stripe.com) — payment processing and subscription management. Stripe's privacy policy is available at stripe.com/privacy.
• Supabase (supabase.com) — database hosting, authentication, and real-time data infrastructure. Data is stored in U.S.-based AWS regions. Supabase's privacy policy is available at supabase.com/privacy.
• Vercel (vercel.com) — application hosting and edge delivery. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.

Each provider is bound by contractual data processing agreements and is only permitted to process your data as necessary to provide their services to us.

5.2 Business transfers

If Vibe Check is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your data is transferred and subject to a different privacy policy.

5.3 Legal requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

• Active accounts. We retain your account data for as long as your account is active.
• Deleted accounts. Upon account deletion, we remove your personal data within 30 days, except where retention is required for legal compliance (e.g., financial records, which we retain for 7 years as required by U.S. tax law).
• Game session data. Player names and in-game answers are deleted at the end of each game session as part of our cleanup process. Aggregated game statistics (total games hosted, player counts) are retained in your host profile.
• Log data. Server logs are retained for up to 90 days.

Depending on your location, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Request correction of inaccurate or incomplete data.
• Deletion. Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
• Portability. Receive your data in a structured, machine-readable format.
• Objection. Object to processing based on legitimate interests.
• Withdraw consent. Where processing is based on consent, withdraw it at any time without affecting prior processing.
• California residents (CCPA). You have the right to know what personal information we collect, to delete it, to opt out of its sale (we do not sell personal data), and to non-discrimination for exercising these rights.

To exercise any of these rights, email support@vibecheck.mobile. We will respond within 30 days (45 days for complex requests). We may need to verify your identity before fulfilling a request.

We use the following types of cookies:

• Authentication cookies. Strictly necessary session tokens that keep you logged in. These cannot be opted out of without logging out of the Service.
• Access cookies. A short-lived cookie used during early-access gating. Expires after 30 days.

We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You can control cookies through your browser settings, but disabling authentication cookies will prevent you from staying logged in.

The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@vibecheck.mobile and we will delete that information promptly.

If you are between 13 and 18, you may use the Service only with the involvement and consent of a parent or legal guardian.

We implement industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, bcrypt password hashing, row-level security policies on our database, and access controls limiting who on our team can access production data.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify you as required by applicable law.

Vibe Check is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. or other countries where our service providers maintain infrastructure. We take steps to ensure that such transfers are conducted in accordance with applicable law, including the use of Standard Contractual Clauses where required.

The Service may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party services you visit.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date, and — where required by law — by sending you an email notice. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

If you have questions, concerns, or requests relating to this Privacy Policy, please contact us: