Privacy policy

Who we are

VibeMetrics is run by Arman Mkhitaryan, Prague, Czech Republic (IČO 12345678) ("we", "us"). We run the analytics service at https://www.vibemetrics.app/.

Questions about privacy: [email protected].

Two kinds of data

About you, our customer: your account, your apps and your plan. For this data we decide why and how it's used (we're the controller).

About the visitors of apps that use VibeMetrics. Our customer decides to measure their app, so they're the controller and we process the data on their behalf, under our data processing agreement. If you visited such an app, please contact its owner first; we'll help them answer you.

What we collect about you

• Your email address, to sign you in and to write to you.
• The apps you add: name, web addresses, time zone and settings.
• Your plan and usage: plan, pageviews this month, and the IDs Stripe gives your customer record and subscription. Your card details go to Stripe only; we never see them.
• Which emails we sent you and when (so each one goes out once).
• If you join the waitlist: your email, your optional answers, and where you came from (for example ?utm_source=x).
• Anything you write to us.

Why we use it

• To provide the service you signed up for: your account, dashboards, the weekly email (you can switch it off) and billing emails (performance of our contract with you).
• To keep the service secure, prevent abuse and improve it (our legitimate interest).
• To keep accounting records once you pay (legal obligation).
• To send waitlist news, which you asked for (consent; reply "remove" any time).

What we collect for our customers

The app's owner chooses how visitors are told apart, and can switch any time in Settings:

• Standard mode: our script keeps a random visitor ID in the visitor's browser (local storage, up to a year) and a visit ID for the browser session. This links a visit on Monday to a signup or payment on Thursday.
• Cookieless mode: our script stores nothing in the visitor's browser. Our server computes an ID that changes every day from a daily secret, the app, the IP address and the browser, so visits from the same person are linked within one day only. The IP address is only used for this calculation and is never stored.

In both modes, our script and our server record:

• The pages viewed (without query strings), the referring website and campaign tags (UTM).
• The country. We look it up from the IP address while the request is handled, then discard the IP address; it's never stored.
• Device type, browser and operating system.
• Events the app sends (such as a signup) and, if the app links them, its own user ID for that person.
• From the app owner's Stripe account: payment amounts, currency, time and Stripe's IDs for the customer and invoice.

We also count which AI crawlers (such as GPTBot or ClaudeBot) read which pages of the app, as hourly totals. These are bots, not people: we keep no IP address, browser details or visitor ID for them.

We reject event data that looks like an email address, and remove sensitive parameters (such as tokens and codes) from addresses before storing them.

Our own website

We measure our own site with VibeMetrics, and the banner lets you choose how (change your answer any time with Cookie settings in the footer). If you allow it: a random visitor ID in your browser's local storage (vm_vid, kept up to a year) and the visit in session storage. If you say no: we still count the visit, but nothing is saved in your browser; our server makes a visitor ID for that day from a secret that changes daily, your IP address and browser type, and the secret is deleted the next day, so the ID can't be linked to you or across days. We don't use cookies for this and we never store your IP address. When you create an account, we link that visit to your account's ID (never your email), so we can see which channels bring signups. When you add an app, we count that too, without your email or the app's name. Pages inside the app aren't counted. Signing in uses cookies that are strictly needed to keep you signed in.

Who else handles data

We use a few service providers to run VibeMetrics: hosting and database providers, a network and security provider that every request to our site passes through (including our tracking script's), an email provider, and Stripe's Link, which sells our plans. Some are in the USA. Transfers rely on the EU-US Data Privacy Framework where the company is certified, and otherwise on the EU's standard contractual clauses.

How long we keep it

• Your account and your apps' data: while you have an account. Deleting your account deletes all of it at once; deleting an app deletes that app's data.
• If your trial or plan ends without a new plan, we keep recording for 90 days and delete the recorded data 365 days after the end, unless you pick a plan.
• The daily secrets used in cookieless mode: deleted after two days.
• Waitlist entries: until you ask us to remove them.
• Invoices and payment records are kept by Stripe as the seller, and by us where accounting law requires it.

Your rights

You can ask us for a copy of your data, to correct or delete it, to limit or object to its use, or to receive it in a portable format. Write to [email protected]. You can delete your account yourself under Account, and switch the weekly email off there or from any email.

You can also complain to a data protection authority: in the Czech Republic, the Office for Personal Data Protection (uoou.gov.cz), or the one where you live.

Changes

If we change this policy, we update the date at the top. If a change matters to you, we email you before it applies.