Privacy Policy
Last updated: April 30, 2026 · Applies to all Vajby users including EU residents (GDPR)
Short version: We collect as little as possible. Guests leave no trace. Registered users share only an email. We don't sell your data. You can delete everything at any time.
1. Who We Are
Vajby ("we", "us", "the Platform") is an anonymous chat platform. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use Vajby. It applies to all users, including EU residents covered by the General Data Protection Regulation (GDPR).
Data controller contact: privacy@vajby.com
2. Data We Collect
Guests (no registration)
- A temporary anonymous nickname (chosen by you or auto-generated)
- Messages you send in public chat (stored temporarily)
- Basic session data (browser type, IP address) for security and spam prevention
- All guest data is deleted when you close the tab. We do not link guest sessions to identity.
Registered Members
- Email address (required for account creation)
- Username and gender (chosen by you)
- Profile bio and avatar photo (optional, provided by you)
- Messages in public chat (retained per platform rules)
- Direct messages (retained for 7 days, text only — images are not stored)
- Token balance and transaction history
- Login timestamps and IP addresses (for security)
What we do NOT collect
- Real name, phone number, or home address
- Video or audio recordings (we do not record streams)
- Payment card details (handled by Stripe — we never see your card number)
- Data from third-party social networks
3. How We Use Your Data
- To operate the Platform and provide chat, video, and messaging features
- To authenticate registered users and maintain account security
- To process token purchases (via Stripe)
- To detect and prevent spam, abuse, and violations of our Terms
- To respond to reports and enforce our Community Rules
- To send transactional emails (password reset, account notifications) — no marketing without consent
We do not use your data for advertising profiling. We do not sell, rent, or share your personal data with third parties for their marketing purposes.
4. Data Retention
- Guest data: Deleted on tab close. Messages may appear briefly in other users' sessions but are not persistently linked to you.
- Public chat messages: Retained for up to 30 days, then automatically deleted.
- Direct messages (text): Retained for 7 days for registered users, then deleted.
- Profile data: Retained until you delete your account.
- Security logs (IP, login times): Retained for up to 90 days.
- Payment records: Retained as required by applicable tax law (typically 7 years), held by Stripe.
5. Third-Party Services
We do not use Google Analytics, Facebook Pixel, or other advertising trackers.
6. Cookies
We use only essential functional storage (localStorage / sessionStorage in your browser) to remember your theme preference, nickname, and login session. We do not use third-party tracking cookies. No cookie consent banner is required because we use no non-essential cookies.
7. Your Rights (GDPR)
If you are located in the EU or EEA, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate data.
- Erasure ("right to be forgotten"): Request deletion of your data. You can also delete your account directly via Settings.
- Restriction: Request that we limit processing of your data.
- Portability: Request your data in a machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at privacy@vajby.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
8. Security
We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords (via Supabase Auth), and access controls on our database. No system is 100% secure — if you suspect a security issue, please report it immediately to security@vajby.com.
9. Children's Privacy
Vajby is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we become aware that a minor has used the Platform, we will immediately delete their data and ban the account.
10. Changes to This Policy
We may update this Policy from time to time. We will update the "Last updated" date at the top. For significant changes affecting registered users, we will send an email notification. Continued use after changes constitutes acceptance.
11. Contact
For privacy questions, data requests, or to report a concern: