Privacy Policy

1. Who We Are

Vibeland is operated by Ellie Rastian, Berlin, Germany.
Contact: ellie@berlin.de

2. What We Collect

We collect only what is needed to run the platform:

• Account data — email address, username, and hashed password (or OAuth profile data if you sign in with a third-party provider). We never store plaintext passwords.
• Content you submit — tool listings (name, description, links, icon), comments, bookmarks, and follows.
• Engagement data — upvotes, view counts, and similar interactions used to rank and display content.
• Feedback — if you use our feedback widget, we store the message you send along with your user ID (if signed in) and the page URL.
• Server logs — IP address (anonymized), browser type, and request metadata, retained for up to 30 days for security purposes.

We do not use analytics, advertising, or tracking cookies of any kind.

3. Why We Process Your Data

• Account & content — to provide the service you signed up for (Art. 6(1)(b) GDPR — contract performance).
• Engagement & server logs — to keep the platform secure and functional (Art. 6(1)(f) GDPR — legitimate interest).

4. Service Providers

We rely on two third-party processors:

• Supabase (database, authentication, file storage) — your account data, content, and uploaded files are stored in Supabase. Servers may be in the EU or the US (protected by Standard Contractual Clauses). Privacy policy
• Vercel (hosting) — serves the website and processes server log data. Privacy policy

5. Cookies

We use only essential cookies required for authentication (session tokens). No analytics, advertising, or tracking cookies are used. These are technically necessary and do not require consent (TDDDG § 25(2)).

6. Your Rights

Under the GDPR you can:

• Access your stored data (Art. 15)
• Correct inaccurate data (Art. 16)
• Delete your data (Art. 17) — you can delete your account in Settings at any time
• Restrict processing (Art. 18)
• Export your data in a portable format (Art. 20)
• Object to processing based on legitimate interests (Art. 21)

Contact ellie@berlin.de to exercise any of these rights. You also have the right to lodge a complaint with your state data protection authority (Landesdatenschutzbehörde).

7. Data Retention

Account data and content are retained until you delete your account. Server logs are automatically deleted after 30 days.