VibePrivacy Policy
This policy explains what personal information VibeIncidents collects, why, who we share it with, and the choices you have. It applies to vibeincidents.com and the weekly digest we send.
1. Who we are
VibeIncidents is operated by VibeIncidents, 9200 NW 39th Ave, Ste 130-3177, Gainesville, FL 32606, USA. For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the controller of the personal data described here. Contact us about anything in this policy at support@vibeincidents.com.
2. What we collect
| Where | What we collect |
|---|---|
| Weekly digest signup | Your email address. Kit, our email provider, may also record the signup time and your IP address, and whether you open or click our emails. |
| Email you send us (support@, security@, audits@) | Your email address and whatever you include in the message, such as a correction, a company's reply or a security report. |
| Visiting the site | Cloudflare, our host, processes standard request data such as IP address, browser type, the page requested and the time, to serve the site and protect it from abuse. It may also receive network error reports from your browser. |
We do not use analytics, advertising pixels, session recording, social media embeds or social media trackers on vibeincidents.com. We do not knowingly collect information from children under 16.
3. Why we use it and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Sending the weekly digest | Consent, which you can withdraw at any time using the unsubscribe link in every email |
| Answering your emails, handling corrections, replies from named companies and security reports | Legitimate interests (responding to people who contact us and keeping our reporting accurate) |
| Keeping the site secure and preventing spam and abuse, including abuse of the signup form | Legitimate interests (protecting our service and visitors) |
4. Who we share it with
We share personal data only with the service providers we need to run VibeIncidents. They process it on our behalf and under their own data protection terms:
- Cloudflare, Inc.: website hosting, content delivery, security, the newsletter signup endpoint, and forwarding of email sent to our @vibeincidents.com addresses.
- Kit (ConvertKit LLC): newsletter signups and email delivery.
Email forwarded to us is delivered to the inbox of the email provider we use. We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganization of the business. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. International transfers
We are based in the United States, and our providers process data in the United States and other countries. When we transfer personal data from the EU, EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where relevant), which are built into our providers' data processing terms, or on the EU-U.S. Data Privacy Framework where a provider is certified under it.
6. How long we keep it
- Newsletter email address: until you unsubscribe or ask us to delete it.
- Email correspondence: up to 2 years after our last exchange. If your email led to a correction or a published reply, we may keep a record of that for as long as the entry is online.
- Hosting request logs: kept by Cloudflare for its standard short period. We do not export or store them ourselves.
7. Your rights
If you are in the EU, EEA or UK
You have the right to access your personal data, correct it, delete it, restrict or object to how we use it, and receive a portable copy. Where we rely on consent, you can withdraw it at any time. You also have the right to complain to the data protection supervisory authority where you live or work, or where you think a problem happened (see the EDPB list or the UK ICO). We would appreciate the chance to fix it first, so please email us.
If you are a California resident (CCPA/CPRA)
You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, and we have not done so in the past 12 months. We do not collect sensitive personal information. We will not treat you differently for using any of these rights. You can use an authorized agent to make a request; we may ask for proof that they are acting for you.
The categories of personal information we collected in the past 12 months are listed in section 2: identifiers (email address, IP address) and internet activity (server request data, and email open and click data recorded by Kit). Sources, purposes and recipients are in sections 2 to 4.
Global Privacy Control
We honor Global Privacy Control (GPC). If your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information. Since we do neither, the signal requires no further change, but we will respect it if that ever changes.
How to make a request
Email support@vibeincidents.com from the address you used with us. We will confirm we received it, may ask for information to verify who you are, and will answer within 30 days (GDPR) or 45 days (CCPA). Residents of other US states with privacy laws can make the same requests and may appeal a decision by replying to our answer.
8. Cookies
VibeIncidents does not set any cookies of its own and does not use analytics or advertising cookies, so there is no cookie banner. Details are on our cookie page.
9. Security
The site is served over HTTPS. Our Kit API key is stored as an encrypted secret and is never sent to browsers.
10. Changes
We may update this policy. The version posted here is the current one, and the date at the top shows when it last changed. If a change is significant, we will tell digest subscribers by email.
11. Contact
VibeIncidents, 9200 NW 39th Ave, Ste 130-3177, Gainesville, FL 32606, USA. Email: support@vibeincidents.com.