Privacy Policy

Information we collect

When you sign in with Google, we receive your Google account identifier, email address and verification status, and the name and profile image provided by Google. We validate the ID token to identify your account. We do not receive your Google password or request access to Gmail, Drive, contacts or calendars for sign-in.

When you sign in with GitHub, we receive your GitHub account identifier, username, display name and avatar. When you use phone sign-in, our authentication service processes your phone number and verification requests. We also store our own account identifier and login sessions.

We store the profile details, social links, tip information and images you provide; uploaded or linked works and their metadata; comments, follows, likes, reports, notification records and publishing authorizations. If you enable push notifications, we store your browser's push subscription and language preference.

Our infrastructure processes technical information such as IP addresses, request details, timestamps and error or security logs to operate and protect the service. We record aggregate plays and daily visitor counts for works. Browser storage helps avoid counting the same visitor repeatedly within a day.

How we use information

We use this information to authenticate users, maintain sessions, display profiles and works, provide social features and notifications, calculate rankings and creator statistics, review content, address reports and support requests, and prevent abuse.

Google account information is used for sign-in and account management; the provided name and image may initialize your public profile. VibeVibi does not sell personal information, use Google user data for advertising, or use Google user data to train general-purpose AI models.

Public information

Your handle, nickname, avatar, profile details, social links, tip information and published works are public. A registered account may appear in author lists and search even before it publishes a work. Comments, follow lists and profile activity counts can also be public. Your phone number, Google email address and login credentials are not displayed on your public profile.

Only publish material you are comfortable sharing. Public information can be copied, indexed or retained by other people, independently of VibeVibi.

Service providers and disclosures

We use Cloudflare for hosting, databases, file storage, delivery, security and page rendering; our shared authentication service for account verification and sessions; Google and GitHub for their respective sign-in options; and Alibaba Cloud and telecommunications providers for SMS verification.

Text and images submitted for display, including names and avatars used to initialize third-party login profiles, may be processed by Tencent Cloud's automated content moderation service. This is used to check content safety. Browser push providers process delivery information when you enable notifications. Google Fonts and third-party avatar hosts may receive ordinary network request information when your browser loads their resources.

Information may also be disclosed when needed to comply with applicable law, respond to lawful requests, protect users or the service, or at your direction. Providers may process information in countries other than your own.

Cookies, storage and creator content

We use login cookies, browser storage and caches for sessions, language preferences, visitor counting, saved page data and installed-app functionality. You can clear these through your browser; doing so may sign you out and remove locally saved information. You can disable push notifications in your browser or device settings.

Creator works run on a separate content domain and may use browser storage or connect to external services. Hosted works share a content origin, so storage used by one work is not guaranteed to be isolated from another hosted work. Do not treat a work's local storage as a private vault. Opening an external work takes you to a service operated outside VibeVibi; review that service's privacy information before sharing personal data.

Retention and security

We keep account information, content and interaction records while needed to provide the service. Security, abuse-prevention, legal and backup records may remain for longer where necessary. Retention depends on the purpose and record type; we do not promise immediate removal from all logs, backups or third-party copies.

We use HTTPS, restricted service access and session controls to protect information. No internet service or storage system can guarantee complete security.

Your choices and requests

You can edit your profile, remove your own comments, manage your works, revoke publishing authorizations and control notifications using the available account features. For access, correction, export, account deletion or other privacy requests, contact us below. There is currently no self-service account deletion button. We may need to verify account ownership before acting, and will explain any limits that apply.

You may also remove VibeVibi's access from your Google Account connections or GitHub application settings. Revoking provider access does not itself delete data already held by VibeVibi. A request concerning VibeVibi does not automatically delete accounts in other applications that use the shared authentication service.

Updates

We may update this policy when the service or its data practices change. The updated date appears on this page; where required, we will provide additional notice or request consent.

Operator and contact

Operated by: Xecho Inc

For privacy, account deletion and service questions, contact: vibe-store@xecho.fun