1. Data controller
The data controller under the GDPR is:
TODO: Name / Company
TODO: Street, ZIP, City
E-mail: [email protected]
2. General information
This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data within our online offering and the associated websites, features, and content (collectively, the “Online Offering”).
3. Hosting
The website is hosted by Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare processes IP addresses where necessary to deliver and secure content. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and performant delivery).
Cloudflare is certified under the EU-US Data Privacy Framework. Further information: https://www.cloudflare.com/privacypolicy/.
4. Server log data
Each time the website is accessed, technical data is automatically collected (browser type, operating system, referrer, shortened IP address, time). This data is processed solely to ensure operation and is not combined into profiles.
5. Cookies and local storage
This website does not use tracking cookies. Only your browser’s localStorage is used to store your theme preference (day/night). This information never leaves your device.
6. Downloads via cdn.onedayvibes.com
When downloading the application, the request is served from the CDN at cdn.onedayvibes.com. Technical data (IP, user agent, timestamp) is processed for delivery. Legal basis: Art. 6 (1) (b) GDPR.
7. Data processing in the app
This privacy policy refers to the website. Data processing in the Vibecheck application is TODO: link a separate app privacy policy or describe in full here (account, authentication, chat content, location, push tokens, audio recordings, etc.)
8. Fonts
The website loads fonts from Google Fonts (Google Ireland Limited). This transmits your IP address to Google. Legal basis: Art. 6 (1) (f) GDPR. TODO: consider self-hosting fonts to avoid this third party
9. Your rights
You have the right at any time to:
- Access the data stored about you (Art. 15 GDPR)
- Rectification of incorrect data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise your rights, contact [email protected].
10. Supervisory authority
Competent supervisory authority:
TODO: relevant state data protection authority
11. Changes
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements. You can find the current version on this page at any time.