Privacy
Last updated 31 October 2026
This notice explains what Vibnelo stores about you, why, and what you can do about it. We show no ads and sell no data.
What we store
| Data | Why | How long |
|---|---|---|
| Your @name, display name, bio, links, avatar, banner, status | Your public profile | Until you change them or delete your account |
| Passkey public key and a hash of your recovery key | Signing you in (we never see your face or fingerprint; they stay on your device) | Until you remove the passkey or delete your account |
| A random device id (on your device and with each request) | Counting listens and votes, letting guests like and vote, preventing double votes | Listening events: 8 days; after that only each hook’s daily totals stay (plays, finishes, countries, never a device or network). Likes, battle votes and Crate saves you make as a guest stay with the device id (they count in the totals); clearing the app's storage on your device ends the link to you. |
| Listens, likes, saves (your Crate), comments, backs, votes, friends, gifts, drops | Running the app: Heat, Ear Score, Battles, friends, your Crate (only you see it) | Until you delete them or your account |
| What you search for | Showing results. Searches are not stored on our servers; your recent searches stay only in your browser, where you can clear them | Not kept on our servers |
| A salted hash of your network address (never the address itself) | Stopping abuse: reports, sign-ups, guest votes and listening counts | Listening events: 8 days. Reports: removed a month after the report is closed. |
| What you are listening to right now | Shown on your profile to your friends only | 2 hours |
| Notifications | Your inbox | 90 days |
| Reports you send (and an e-mail if you give one) | Handling the report and answering you | As long as needed to handle it |
Legal bases
We process this data to provide the service you asked for (contract), to keep it safe from abuse (legitimate interest) and to meet legal duties such as handling notices about illegal content.
Cookies
One cookie: the sign-in session (strictly necessary). Your device also keeps your settings and device id in local storage. No tracking or advertising cookies, so there is no cookie banner.
Who processes it
Vibnelo runs on Cloudflare (hosting, database, file storage, and Workers AI, which turns the words of an uploaded hook into text). Fonts load from Google Fonts. Share cards are drawn on your device.
Your rights
You can see and edit your profile, delete comments, and delete your whole account in Settings. Under the GDPR you can also ask us for a copy of your data, to correct it, or to stop a processing: write to the address below. You can complain to your data protection authority (in Slovenia: the Information Commissioner, ip-rs.si).