Privacy policy

VibeNote is the data controller for personal data collected through this website. This policy explains what we collect, why, how long we keep it and what rights you have under the General Data Protection Regulation (GDPR) and applicable local law. Contact: hello@vibenote.net.

• Account & order data — name, email, phone (optional), delivery address, order history, order number, payment status. Card numbers are handled by our payment provider and never reach our servers.
• Access data — unlock codes you activate, which content you have access to, timestamps of activation and viewing (needed to deliver content and to apply watermarks).
• Personal video requests — the name and message you submit for a Private Edition video, shared only with the model who records it.
• Messages — anything you send through the contact form or by email.
• Technical data — IP address, browser type, device, pages visited and the age-confirmation status, collected through server logs and strictly necessary cookies.

We do not collect special-category data. We do not ask for, and you should not send, any government ID unless we specifically request it to verify age.

• To fulfil your order (contract): produce and ship your card, deliver digital content, send order and shipping emails.
• To protect content and models (legitimate interest): bind codes to accounts, watermark content, detect sharing or fraud.
• To comply with law (legal obligation): invoices and accounting records, age restrictions, responding to lawful requests.
• To answer you (legitimate interest): replies to messages, returns and claims.
• Marketing (consent only): we send newsletters only if you opt in, and every email has an unsubscribe link.

We do not sell personal data and do not use it for automated decision-making with legal effects.

• Shipping carriers — name, address and phone, to deliver your parcel. Labels never describe the contents.
• Payment providers — to process payment; your statement shows a neutral merchant name.
• Suppliers of shop items — for products shipped directly by a partner supplier, only the delivery details needed to send the parcel.
• Models — only the first name and message you submit with a personal video request. Models never see your email, address or payment details.
• Partners — business partners see aggregated sales figures only, never customer names or emails.
• Hosting and email providers — under data-processing agreements, within the EU/EEA where possible.
• Authorities — where required by law.

• Order and invoice data: as long as required by tax and accounting law (typically 10 years).
• Account and access data: for as long as your account exists, so you can keep watching what you unlocked; deleted 30 days after you close your account.
• Personal video requests: until the video is delivered, then archived with the content for as long as you have access.
• Contact messages: 24 months.
• Server logs: 90 days.

You can ask us at any time to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate data;
• delete your data (“right to be forgotten”), subject to legal retention duties;
• restrict or object to processing based on legitimate interest;
• receive your data in a portable format;
• withdraw consent (for marketing) at any time.

Write to hello@vibenote.net; we respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority.

Note: deleting your account permanently removes access to content you unlocked. Unlock codes cannot be re-issued after deletion.

We keep cookies to a minimum and use only what the site needs to work:

• Session cookie — keeps you signed in (strictly necessary).
• Age confirmation — remembers that you confirmed you are 18+ (strictly necessary).
• Cart — stored in your browser's local storage, never sent to us until you check out.

We do not use advertising or cross-site tracking cookies. If we introduce analytics in the future, we will ask for your consent first. You can clear cookies at any time in your browser settings; the site will keep working, but you will need to sign in again.

Data is transmitted over HTTPS, passwords are stored as salted hashes, and access to customer data is limited to a small number of staff bound by confidentiality. Video content is streamed through signed, expiring links and watermarked to the viewing account. Parcels are unbranded and payment descriptors are neutral so that nothing about your order is visible to others.

Models are independent adult creators with their own agreement and privacy terms with VibeNote. We store their identity verification, payout details and earnings data under strict access control; partners and customers never see this information. Models see only the first name and message attached to a personal video request, never any other customer data.

Privacy questions or requests: hello@vibenote.net or the contact form. See also the Terms of service.