Vibes is live
Vibes
Affiliate

Privacy Policy

Last updated: July 23, 2026

Data Controller

The controller responsible for the processing of personal data on this site (Art. 4(7) GDPR) is:

Ben Modigell (trading as Vibes)
Buchheimer Straße 32
51063 Köln, Germany
Email: hello@vibesdj.io

1. Information We Collect

Account Information

When you access your license, we collect your email address and short-lived verification code metadata. License access does not require a password.

License Information

We store your license key, purchase details, device activations, and hardware fingerprints to enforce license limits and prevent abuse.

Payment Information

We use Stripe for payment processing. We never store your credit card information. Stripe handles all payment data securely.

Usage Data

We collect device IDs, hardware hashes, IP addresses, and app version information to validate licenses and prevent fraud.

2. How We Use Your Information

  • To verify license access requests
  • To process purchases and issue licenses
  • To validate license activations
  • To send transactional emails (license keys, receipts)
  • To provide customer support
  • To prevent fraud and abuse

Discount Codes and Marketing Emails

When you enter your email address in the discount offer on our website, we process it on the basis of your consent (Art. 6(1)(a) GDPR) to (1) generate a personal, single-use discount code through our payment provider Stripe, and (2) send you that code and occasional product updates through our email provider Loops. You can withdraw your consent at any time via the unsubscribe link in any email; this does not affect processing carried out before the withdrawal. Discount-code data is deleted once the code expires (after 7 days).

3. Data Storage

Your data is stored securely using Supabase (PostgreSQL) with encryption at rest. License access codes are short-lived and single-use.

4. Cookies and Analytics

We use cookies and similar technologies for site functionality, analytics, session recordings, and advertising measurement. The categories below describe what each tool does and how your consent applies.

Essential Cookies

Required for site functionality, including authentication sessions. These cannot be disabled.

Analytics (Optional)

With your consent, we collect page views, clicks, and scroll depth using PostHog. This helps us understand how visitors use our site and improve the experience. PostHog runs on the Vibes website and desktop app only, not in the browser extension.

Session Replay (Optional)

With your consent, we record browsing sessions using PostHog. All form inputs are masked automatically, and we apply PII filtering to redact emails and sensitive data. You can opt out at any time via the cookie settings.

Advertising and Measurement

We use Google Ads (conversion tracking), the Reddit advertising pixel, and Ahrefs Analytics to measure marketing campaigns and understand how people find our site. These services may set their own cookies and receive your IP address and basic page-visit information. We also use Vercel Speed Insights to measure site performance.

Affiliate Attribution

If you arrive via an affiliate referral link containing a ref or via parameter, we set two cookies, vibes_ref and vibes_ref_utm, each lasting 60 days. These cookies attribute a later purchase to the referring affiliate so we can pay them commission.

Your Cookie Choices

You can manage your analytics and session-replay preferences at any time through the cookie settings. PostHog analytics and session replay are disabled by default and only enabled if you choose to accept them. You can also control cookies through your browser settings.

5. Third-Party Services

We use the following third-party services:

  • Supabase: Database and authentication
  • Stripe: Payment processing
  • Loops: Transactional and marketing email delivery
  • Vercel: Website hosting and performance measurement
  • PostHog: Analytics and session replay (with your consent)
  • Google Ads: Advertising conversion measurement
  • Reddit: Advertising pixel
  • Ahrefs: Website traffic analytics

6. Data Sharing

We do not sell your personal information. We only share data with third-party services necessary to provide our service (payment processing, email delivery).

7. Your Rights

You have the right to:

  • Access your personal data
  • Request data deletion
  • Export your data
  • Opt out of marketing emails via the unsubscribe link in any email

8. Data Retention

We retain your account data as long as your license is active. License, invoice, and purchase records are kept after deletion where we are legally required to retain them, including German statutory retention obligations for invoices and accounting records (generally up to 10 years under German tax law). Short-lived verification codes are deleted shortly after use.

9. Security

We use industry-standard security measures including encryption, secure authentication, and regular security audits. However, no system is 100% secure.

10. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children.

11. Usage Analytics (Vibes Desktop App)

This section describes the optional, anonymous usage analytics in the Vibes desktop app.

What we collect, and only with your consent

When you first launch Vibes, we ask whether you want to share anonymous usage data. This is off by default. If you do not opt in, no analytics code runs and nothing is sent, ever.

If you opt in, we collect anonymous product events, for example: the app was started, an import finished, a vibe or set was created, an export ran, a feature such as QuickSave was used. Each event includes:

  • the event name and, where relevant, a count (for example how many tracks an import contained)
  • app version and operating system
  • which screen of the app was used
  • the size of your library as a rough range (for example "1,000 to 10,000 tracks"), never its contents
  • your license state (trial, licensed, or expired), without any license key or account detail
  • a randomly generated identifier stored only on your device, used to count unique installs

What we never collect

No names, no email addresses, no track titles, no artist names, no file names or paths, no playlists or tags you create, no audio, and no license keys. Analytics events contain no content from your music library. Your IP address is used only to derive an approximate (country-level) location and is discarded immediately; we do not store it.

Who processes it

Events are processed by PostHog (PostHog EU, data hosted in Frankfurt, Germany) acting as our data processor under a data processing agreement. Data does not leave the EU.

Legal basis

Your consent (Art. 6(1)(a) GDPR). We use this data for one purpose: understanding which features are used so we can improve Vibes.

Withdrawing consent

You can turn off "Share anonymous usage data" at any time in Settings, under General, Privacy. This takes effect immediately and also deletes the random identifier from your device, so any future opt-in starts from a blank slate. Withdrawal does not affect the lawfulness of processing before it.

Retention

We keep event data for as long as it remains useful for understanding how Vibes is used and improving it. Because events are anonymous, they cannot be linked back to you or your device once the random identifier on your device is deleted (which happens when you opt out).

Your rights

You have the right to access, correct, or delete personal data, and to lodge a complaint with a supervisory authority. Note that because analytics events are anonymous, we usually cannot link them back to you. Contact: hello@vibesdj.io

12. Error Reporting (Vibes Desktop App)

To fix problems quickly, the Vibes desktop app automatically sends anonymous diagnostic reports when an error, crash, or failure happens. This is on by default; you can turn it off at any time in Settings, under Privacy.

Each report contains: a stable error code and category, a redacted error message and stack trace (file paths, names, and quoted text are stripped before sending), your app version, operating system, CPU count and available memory, an anonymous per-install identifier, and a short trail of the in-app actions before the error (feature and screen names only). We never send your music, file names, track or set titles, tags, or license keys.

Reports are stored on our own servers in the EU and used solely to diagnose and fix issues. Legal basis: our legitimate interest in a stable, secure product (Art. 6(1)(f) GDPR). You may object at any time via the Settings toggle, and can request deletion of your data by emailing hello@vibesdj.io.

13. Vibes Companion (Browser Extension)

This section describes the data practices of the Vibes Companion browser extension specifically.

Stored locally on your device

Your library (saved tracks, crates, settings, and your Pro license state) is stored locally in your browser (chrome.storage.local). This data stays on your device; we do not transmit or have access to it.

License activation and verification

When you activate Vibes Companion Pro, the extension sends your license key, a randomly generated device identifier, and the extension version to our licensing API at vibesdj.io to validate your license and enable Pro features, and periodically re-verifies it. No browsing data is sent during this process.

Purchase-link search

When you use the extension's purchase-link or buy features, the extension sends the track's title and artist as a search query directly to the relevant third-party music store (for example Beatport, Bandcamp, SoundCloud, Traxsource, or Juno Download) to retrieve purchase links. These queries are subject to the receiving store's own privacy policy. We do not receive or store them.

No tracking in the extension

The Vibes Companion browser extension contains no analytics, tracking, advertising, or session-replay tools. It does not collect personally identifiable information, browsing history, or location. (Any analytics described elsewhere in this policy apply to the Vibes website and desktop app, not the browser extension.)

Data deletion

You can clear your library at any time from within the extension, and uninstalling the extension removes all locally stored data.

14. Changes to Privacy Policy

We may update this policy periodically. Changes will be posted on this page with an updated date.

15. Contact

For privacy concerns or data requests, contact: hello@vibesdj.io

5% off