What we collect, and what we deliberately don’t.

Effective 22 August 2026

VibeCity runs no advertising, no third-party analytics and no tracking pixels. There is no Google Analytics, no Meta pixel, no session recorder and no ad network. Fonts are served from our own domain, so loading the map does not tell anyone else that you did.

The short version. If you just ride the network, we store a pseudonymous fingerprint that cannot be turned back into you, and nothing else. If you open a station, we store the details of that station and the email Stripe verified for your receipt.

If you are just visiting

We do not store your IP address. Instead, when your browser makes a request, our server combines your IP address and user-agent string with a secret key and hashes them (HMAC-SHA256). The result is a visitor key: a fixed-length string that cannot be reversed into your IP address, and that we cannot match against any other service’s data.

A separate key is derived for each purpose, so the four uses below cannot be cross-referenced with each other:

Passengers — counting how many browsers are currently open, so the live passenger number is real.
Admissions — counting distinct visits per day since opening.
Rides — making sure one visitor riding to the same station twice in a day counts once.
Rate limiting — stopping one source from flooding the checkout or ride endpoints.

We also record anonymous events for stations — a ride, an outbound click, a share button being pressed — with no visitor key attached to the stored row beyond the daily deduplication above. Our lawful basis for all of this is legitimate interest in operating a working, honestly-counted product.

Stored in your browser, never sent to us

One small value lives in your browser’s local storage and is never transmitted: your day/night map preference. Clearing your site data clears it. We set no advertising or analytics cookies.

If you open a station

We store what is needed to open and run your station:

What you submit: product name, URL, tagline and logo. These are public by design — they are the station sign.
Your email address, as verified by Stripe at checkout. This is private. It is used for your receipt, for the magic link that proves you own the station, and to contact you about your order or a policy change.
Order records: amount, currency, status, timestamps and the Stripe identifiers needed to reconcile a payment or process a refund.

We never see your card number, expiry or security code. Those go directly from your browser to Stripe.

Our lawful basis is performance of a contract for the order itself, and legal obligation for the financial records we must keep.

Who else processes your data

Stripe — payments, checkout, receipts and refunds. Stripe privacy policy
Supabase — the database, and the delivery of owner magic-link emails. Supabase privacy policy
Vercel — hosting and its own operational request logs. Vercel privacy policy

That is the complete list. We do not sell or rent personal data, and we do not share it with anyone else except where the law requires it.

These providers may process data outside your country, including in the United States, under the safeguards described in their own policies.

Logos and images

When you give us a logo URL we fetch that image through our own server so your visitors’ browsers never make a request to the original host. The fetch is restricted to public addresses.

How long we keep things

Visitor keys and presence rows: only as long as the counter they feed needs them — presence is transient, daily counters roll.
Station content: for as long as your station exists.
Order and payment records: retained for as long as tax and accounting law requires, typically six years. We cannot delete these on request, and we do not hard-delete paid rows for moderation or refunds — a refunded station is marked refunded, not erased.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it where we are not required to keep it, object to processing, or ask for it in a portable form. Two of these you can do yourself:

Correct your station — sign in at /manage and edit the name, URL, tagline or logo.
Take it off the map — unpublish from /manage. This is reversible and does not affect your ownership.

For anything else, email support@vibecity.fun. We will respond within 30 days. If you are in the UK or EU and think we have handled your data badly, you can complain to your national data protection authority — but please try us first.

Children

The network is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, email us and we will remove it.

Changes

If we change this policy in a way that materially affects you, we will email the address on your order before it takes effect. The effective date at the top of this page always reflects the current version.

Related: terms of service and refund policy.