Small service. Small data footprint.

BlockFactory Sp. z o.o. (BLOCKFACTORY SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ) is the operator of vibebly.com and the controller of personal data described in this Policy. Its registered office is at ul. Floriana Stablewskiego 13/2, 60-213 Poznań, Poland. KRS: 0000987962. NIP: 7792543090.

Contact us at legal@vibebly.com for privacy questions or to exercise your rights.

This Policy applies to the Vibebly website, catalogue, API, and submission form. It does not apply to the external games, creator pages, communities, or websites we link to; their operators decide how they handle your data.

Depending on how you use the Service, we may handle:

• Submission data: game and author names, game URL, category, tagline, tags, and optional social-profile URLs;
• Public-source catalogue data: creator names, handles, profile links, screenshots, public release dates, and public engagement signals collected from the linked source;
• Technical data: request time, requested route, IP/network information, user agent, referrer, and diagnostic or security events made available by our hosting infrastructure; and
• Correspondence: your email address and the contents of messages you send us.

We do not ask for an account, password, payment data, precise location, or government identifier. Please do not put sensitive or private personal data in a listing.

We use personal data only as reasonably necessary to:

• receive, review, and, if approved, publish and operate requested listings and respond to you, to take steps at your request and perform our agreement with you;
• curate, verify, organise, secure, debug, and improve the Service, based on our legitimate interests in operating a useful and safe catalogue;
• prevent spam, duplicate submissions, abuse, malicious links, and technical attacks, based on our legitimate interests and those of our users; and
• handle legal notices, preserve evidence, and comply with legal obligations.

Where we specifically ask for consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal. We do not use personal data for behavioural advertising, sell it, or make decisions with legal or similarly significant effects using automated profiling.

A game submission remains non-public during review. If we approve it, the submitted game name, author name, game URL, category, tagline, tags, and optional social links may be shown to anyone, indexed by search engines, and copied or discussed by others. Do not submit information you are not authorised and prepared to publish.

Curated entries may also use factual information and screenshots from publicly accessible creator or community sources. Contact us if a listing about you is inaccurate or should be reviewed.

We share data only as needed with infrastructure providers that process it for us, principally Vercel for application hosting, delivery, security, and runtime logs. Provider access is limited by its role and contractual or legal obligations.

We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect people or rights, investigate abuse, or support a merger, financing, acquisition, or transfer of the Service subject to appropriate safeguards.

When you follow a game or profile link, your browser connects to that third party. It may receive ordinary connection data such as your IP address and user agent under its own privacy policy. Vibebly does not control that processing.

Providers may process data in countries outside Poland or the European Economic Area. Where data-protection law requires it, transfers are based on an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. You may contact us for information about safeguards relevant to your data.

User submissions currently live only in temporary application memory and normally disappear when the relevant server instance restarts or is replaced. They are not a durable database. Curated catalogue records remain until updated or removed from the published catalogue.

Security and runtime logs are retained according to the hosting plan and configuration, generally for a short operational window unless a longer period is needed to investigate an incident or meet a legal obligation. Correspondence is kept only as long as needed to resolve the matter and establish or defend legal claims. Backups, where they exist, expire on their normal rotation.

Vibebly does not currently set advertising or analytics cookies and does not include a behavioural analytics SDK. The private admin area sets one strictly necessary, signed session cookie after a successful administrator login; it is not used to track public visitors. Essential delivery or abuse-prevention mechanisms may also be applied by the hosting network. If we add non-essential analytics or cookies later, we will update this Policy and request consent where required before enabling them.

We use proportionate technical measures including input validation, HTTPS-only submitted links, restricted request sizes, same-origin checks, rate limits, security headers, dependency review, private pre-publication review, signed administrator sessions, and limited temporary storage. No internet service is perfectly secure. Please do not submit confidential information, and notify us promptly if you believe the Service or your data has been compromised.

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of your personal data; receive portable data you provided; and object to processing based on legitimate interests. You may also withdraw consent where consent is the basis. Some rights depend on the circumstances and lawful exceptions.

Email legal@vibebly.com with enough information for us to identify the relevant listing or interaction. We may verify your identity before acting. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or your local EEA authority.

The submission feature is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has submitted personal data, contact us so we can review and remove it. External games set their own age rules and content standards.

We may update this Policy when the Service, providers, or law changes. The effective date above identifies the current version. We will give additional notice of material changes where required.

Privacy requests and questions may be sent to legal@vibebly.com. For independent information about GDPR rights, visit the European Commission’s data protection pages or the Polish UODO website.