Vibotype

Vibotype Privacy Policy

Last updated: 2026-07-12

The short version: no name required, your answers are encrypted, you can delete everything, we sell nothing about you, and there are no ad trackers here.

Vibotype (the "Service") is operated by Our Senses ("we", "us").

1. What we collect

  • Quiz answers and your result. Only after you consent on the pre-quiz screen. Encrypted at rest (Section 4).
  • A result link and code, if you save your result. No name or email needed.
  • An email address, only if you give us one (for example, Stripe collects it for your receipt).
  • Payment metadata when you buy: product, date, and Stripe's reference. We never see your full card number.
  • Technical metadata: IP address, browser type, timestamps, and an IP-derived country code, used for security and the EU block.
  • First-party usage events: which screens get used. No third-party scripts, cookies, or advertising identifiers in your browser. A copy is analyzed in PostHog under a random pseudonymous ID that is never your name, email, IP, or any answer.

2. Legal basis

  • Quiz answers and result: your explicit consent under GDPR Article 9(2)(a), given on the consent screen.
  • Result links, purchases, receipts: contract (Article 6(1)(b)).
  • Technical metadata and usage events: legitimate interest in running and securing the Service (Article 6(1)(f)).

3. How long we keep it

  • Answers and results: 365 days by default. Extend up to 3 years, or delete earlier, at vibotype.com/account/privacy.
  • Account and claim metadata: while active, then 90 days.
  • Technical logs: 12 months.
  • Payment records: as long as tax and accounting law requires.

4. Sensitive data, encryption, deletion

Your answers concern sexual behavior, the most protected category of personal data under the GDPR (Article 9). We process them only with your explicit, separate, opt-in consent.

Withdraw any time, free of charge: delete at vibotype.com/account/privacy or email us. Your content is encrypted with a per-user key; deletion destroys that key after a 30-day grace window, and the remaining ciphertext cannot be decrypted by us or anyone else.

5. Who else touches the data

A short list of service providers, each bound by a data-processing agreement, and nothing moves outside it:

  • Stripe processes payments. We never see your full card number.
  • Vercel hosts the Service.
  • Neon runs the database (sensitive content encrypted, Section 4).
  • Resend sends transactional email, such as sign-in links.
  • PostHog receives first-party usage events under a random pseudonymous ID that is never your name, email, IP, or any answer.
  • Anthropic provides AI text generation for an optional assistant feature that is currently switched off. Nothing flows there unless we turn it on and you separately opt in.

We do not sell personal information, we do not share it outside this list, and we use no advertising or cross-site-tracking providers. If a provider is added, this list changes first.

6. Cookies

Strictly necessary only: session, authentication, anti-CSRF. No analytics cookies, no cross-site tracking. EU traffic is not currently served (details).

7. Your rights

Know what we hold, delete it, correct it, take a machine-readable copy, withdraw consent (Section 4), and complain to a supervisory authority. California residents: exercising your CCPA rights never changes your price or service, and because we do not sell personal information, there is no sale to opt out of. Start at vibotype.com/account/privacy.

8. Adults only

The Service is 18+ and not directed at minors. If we learn we hold a minor's information, we delete it.

9. Security

TLS in transit, encryption at rest for sensitive content, least-privilege access, audit logs on the operations that matter.

10. Contact

Privacy questions and data-rights requests: support@vibotype.com.