Privacy policy

• Account: your name, handle, email address and a hash of your password (never the password itself).
• Profile and posts: what you choose to publish — builds, screenshots, recordings, prompts, links, comments, your bio and picture.
• Activity: likes, saves, follows, votes, the teams you belong to and the rounds you enter.
• Email: a record of which emails we sent you and when.
• Technical: the web server logs each request with its IP address and browser. IP addresses are also counted briefly to stop abuse such as mass sign-ups.
• Usage statistics, if you accept cookies: pages viewed, buttons used and how you move through the site, under a random ID (see cookies).

Your profile (name, handle, picture, bio) and everything you publish are public, and search engines can find them. Your email address is never shown. A build posted members-only in a private team is visible to that team’s members only.

• To provide the service (contract): your account, publishing, sign-in links and email confirmation.
• Legitimate interests: keeping the site secure, stopping spam and abuse.
• Consent: statistics cookies, which you can accept or decline in the banner and change under “Cookie settings”.
• Emails about your activity (legitimate interests): notifications and the weekly digest, sent only to a confirmed address. Every one has a one-click unsubscribe, and each kind can be turned off.
• Legal obligation: where the law requires us to keep or hand over data.

Everything is stored and processed in the European Economic Area:

• Amazon Web Services, Stockholm (Sweden): the server, the database, uploaded files and their backups, outgoing email (Amazon SES), and malware scanning of uploads.
• PostHog, EU cloud (Frankfurt, Germany): usage statistics, only if you accept cookies.

These companies process data on our behalf under data processing agreements and do not use it for their own purposes. Amazon is a US company; we use its EU region only, with the European Commission’s Standard Contractual Clauses as the safeguard.

• Your account and posts: until you delete them or ask us to close the account.
• Backups: 35 days, so deleted data is gone from them within 35 days.
• Web server logs: 14 days.
• IP addresses counted to stop abuse: 24 hours.
• Sign-in sessions: 30 days, or until you sign out.

You can ask for a copy of your data, have it corrected or deleted, object to our use of it, or ask us to restrict it. Write to support@bineric.com from the address on your account; we answer within one month.

You can also complain to the Norwegian Data Protection Authority (Datatilsynet) or the authority where you live.

Vibe Off is not meant for children under 16 without a parent’s or guardian’s consent. If we learn we hold such data without it, we delete it.

If this policy changes, we update this page and the date at the top, and tell signed-up users about significant changes by email or on the site.