Last updated: October 16, 2026
This policy describes what VIBESXS actually collects, why, and for how long — not a generic template. If anything here seems unclear, contact us using the details at the bottom of this page.
1. Who we are
VIBESXS (vibesxs.com) is a mood-driven music platform. This policy covers the main site, the Autonomous DJ (A-DJ) mixer, ISO Journey, the Immersive Player, and the contributor/upload tools. It does not cover third-party sites we link to.
2. What we collect
Account data
Creating an account only requires an email address — VIBESXS uses passwordless sign-in (a one-time code emailed to you), not a stored password, for regular listener accounts. We store your email address, an internal account ID, your listening tier, and account status (active or suspended). If you follow a contributor’s referral link to sign up, we record which contributor referred you.
Listening activity
To power features like Recently Played, your Sound Profile, and Mood Forecast, we record each track you play: which track, which mood context, how long you listened, and whether you finished it. We also record your favorited tracks, followed artists, and daily token/play allowance usage (an internal ledger of plays, not a payment record). If you set a mood target, we store that target and, if you choose to share it, a share link others can claim.
Guest (not-signed-in) activity
If you use VIBESXS without an account, your browser generates a random session ID stored in your browser’s local storage (not a cookie). We use it to track your favorites, listening activity, and daily play allowance the same way as above, but without any personal information attached. If you later create an account, this history is transferred into your new account so you don’t lose it — after that point, it’s no longer separately tied to the anonymous session ID.
Lighting integration
If you connect a smart-lighting device through My Lighting, we store an internal device identifier tied to your account so the platform can send it real-time mood/energy data during playback. We don’t collect any data from the device itself beyond what’s needed to address it.
Contributor and label data
If you upload music or manage a label on VIBESXS, we additionally store upload records, artist/track credit assignments, and — for the Contributor Rewards program — referral attribution and reward/gift-token history. Suspicious referral or reward activity may be flagged internally for manual review; a flag doesn’t affect your account unless and until an admin acts on it.
Support tickets
If you contact support, your ticket (including your email and message content) is handled through our support-ticketing plugin, stored in this site’s own database — not sent to a separate third-party support company.
Vibe Party Rooms
If you join a Vibe Party Room — our hosted, host-paid group listening parties — the following applies for that party:
- Party chat. Messages, emoji reactions, any photo or GIF you send, and the mood you pick when you enter and leave the room are stored for that party. They are deleted when the party ends.
- Live voice. When the host speaks to the room, or plays a guest tribute, the audio is relayed live between everyone in that party through our voice provider, LiveKit (see Section 4). Live voice is not recorded. For the duration of a voice session, LiveKit receives your display name and the network information needed to connect you (including your IP address).
- Live voice and mixes in a Vibe Space. The same applies in a Vibe Space: when a host turns on their mic, or goes live with a DJ mix, that audio is relayed in real time to every listener in the room through LiveKit, a third-party real-time media service. LiveKit receives your display name and connection information (including IP address) for the duration of the broadcast.
- Recorded tributes. If you record a tribute for a party, the clip is stored on our servers, reviewed by the host, and — if the host approves and plays it — heard by everyone in the party. You can withdraw a tribute any time before it is played. Approved or not, every tribute for a party is deleted when that party ends.
Date Night Pass
If you join a Date Night Pass room — our hosted, two-person paid session — the following applies for that session:
- Chat. Messages, emoji reactions, and shared GIFs work the same way as Vibe Party Room chat (above): stored for the session, deleted when the session ends.
- Photo snapshots. If you and your partner capture an in-room photo snapshot during a session, it’s stored on our servers, accessible only to the two participants of that specific session while the room is active, and deleted when the session ends. Snapshot files are kept outside our regular web directory and are never served without re-checking that you’re a participant in that room at the time of the request.
- Live voice. Same as Vibe Party Room voice (above): powered by LiveKit, not recorded, receiving your display name and IP address only for the duration of the call.
- Backups. Like the rest of this site, our hosting provider and any third-party services we use (see Section 4) keep their own backups on their own schedule. Deleting a snapshot or chat message from a live session removes it from our active database and file storage immediately, but we can’t guarantee the exact moment it clears from a provider’s backup rotation.
Vibathlon
Vibathlon includes Solo, one-on-one Duet, and one-on-one Battle. For each mode, we record the games in your run, your scores, total, completion time, and date. Duet and Battle also record invitations and match status, the participating accounts, each player’s separate run progress and results. Duet stores each player’s consent choices for paired recognition; its joint certificate requires both players’ consent. Battle may award the clear winner a private winner medal. During either paired mode, each player can see the other’s progress; scores remain private until the mode’s finish rules allow the result to be shown. Duet match history and scores are private by default, and its paired public leaderboard is not available during beta. Battle results are not published on the public leaderboard and cannot be shared through a public certificate. Duet and Battle invitation codes are stored as hashes, can be used once, and expire after ten minutes.
If you choose to appear on the public leaderboard, you pick a generated display alias — never your real name, username, email, or account ID — and only your alias, score, and run date are shown. This is opt-in and separate from the rest of your account: you can turn leaderboard visibility on or off at any time from Your Vibe, and it defaults to off. If you finish a run, you can also generate a private certificate and choose to share it; a shared certificate page shows the same minimum information (alias, score, tier, date) and can be revoked at any time, after which the link stops working.
If you report another player’s public score for abuse (for example, an implausible or offensive alias), reports are limited to 10 per signed-in account per day and are reviewed by our moderation team.
In-game feedback. If you submit feedback through the G orb while playing a game, we store the game and mode, category, message, review status, and submission time to support gameplay QA and beta release decisions. The feedback record is not linked to your account ID, display name, email address, or game-run ID, and the record does not contain an IP address. Please do not include personal details. Feedback entries are automatically removed after 12 months.
If you change your alias or turn off leaderboard visibility, a one-way hash used to prevent alias impersonation is kept, without any link back to your account, for up to 90 days. Resolved player reports and moderation records are kept for 365 days; open reports are kept until resolved. Deleting your account removes your Vibathlon runs, achievements, leaderboard rows, shared certificate links, Duet and Battle participation records, and Battle winner medals, the same way it removes the rest of your account data (see “Your rights” below). Duet pair records are disassociated from your account, unfinished Duets are dissolved, and active paired runs are abandoned. If another player has a retained Battle winner medal for a match with you, your alias in that record is replaced with “A Vibe Player”. An exported copy of your data includes your run history, personal bests, alias, active share links, Duet invitation/match and consent records, and Battle match and trophy records.
Technical data
Your IP address is used briefly and automatically to prevent abuse — for example, limiting how many sign-in codes or support requests can be requested in a short window. It is not stored permanently in plain form. A one-way, non-reversible hash of your IP address (not the address itself) is retained in a small number of internal security/audit logs used to investigate abuse, such as fake plays or ban evasion.
What we don’t do
VIBESXS does not run third-party advertising or analytics trackers (no Google Analytics, no ad pixels) anywhere on the site. We don’t sell your data to anyone.
3. Cookies and local storage
We use standard WordPress login-session cookies to keep you signed in. We use your browser’s local storage (not cookies) to remember your guest session ID, your favorites (as a fallback), and basic player state like volume. If we ever add a bot-verification step (Cloudflare Turnstile) to the sign-up form, Cloudflare may set its own cookie/local-storage entries for that specific purpose only, on that page only. During a live voice session in a Vibe Party Room, our voice provider (LiveKit) may store a small amount of connection state in your browser for the length of that call only.
4. Who we share data with
We use a small number of service providers to run VIBESXS. Each one only receives the data it needs for the specific job listed, and is contractually bound to use it only for that purpose:
- Hostinger — hosts the website and its database, and delivers our outbound email (sign-in codes, party invites, notifications).
- Cloudflare — routes and protects site traffic (DDoS and abuse filtering), and, on the sign-up form, runs the “confirm you’re human” check.
- Railway — hosts the background service that analyses track audio for the mood and energy features.
- Stripe — processes payments for Vibe Party Passes and plan subscriptions. You enter your card details directly on Stripe’s systems — VIBESXS never sees or stores your full card number. From Stripe we receive and store the fact and amount of a payment, your billing email, a Stripe customer reference, your subscription status, and an internal record of what the payment unlocked (a Party Pass, a plan tier, a token allowance).
- LiveKit — relays live audio between participants during voice in a Vibe Party Room. It receives your display name and connection information (including IP) for the duration of a call. Live voice is not recorded, and recorded tributes are stored on our servers, not LiveKit’s.
- Klipy — powers GIF search in Party Chat and Date Night Pass chat. When you search for a GIF, your search term (with a pseudonymous account reference, not your name or email) is sent to Klipy from our server; your IP address is not.
We don’t share your data with anyone else, except where the law requires it.
5. How long we keep data
We keep account and listening data for as long as your account is active. If you delete your account (available any time from Your Vibe → Account Settings), your favorites, play history, and token/play ledger entries tied to your account are deleted immediately. Anonymized security/audit-log entries (the one-way hashes described in Section 2) may be retained longer for abuse-investigation purposes, since they can’t be traced back to you once anonymized.
Party data — chat messages, reactions, mood check-ins and tributes for a specific Vibe Party Room — is deleted when that party ends, regardless of account status. Payment and subscription records associated with a purchase are kept for as long as financial and tax recordkeeping law requires, even after an account is deleted; a data-deletion request will report these as retained for that reason rather than removing them.
Date Night data — chat messages, GIFs, and photo snapshots from a Date Night Pass session — is deleted from our active systems when the session ends, or on cancellation/no-show if the session never starts. As with all data on this site, provider-side backups may retain a copy for a limited period afterward under the provider’s own retention schedule (see “Backups” in Section 2).
6. Your rights
You can, at any time and without contacting us:
- Change the email address on your account (Your Vibe → Account Settings).
- Delete your account and its associated data (Your Vibe → Account Settings).
If you’d like a copy of your data, or want to make a formal data-access or deletion request under GDPR, CCPA, or a similar law, contact us using the details below and we’ll handle it directly.
7. Children’s privacy
VIBESXS is not directed at children under 13, and we do not knowingly collect data from anyone under that age.
8. Changes to this policy
If we materially change what we collect or how we use it, we’ll update the date at the top of this page and, for significant changes, note it on the site.
9. Contact
Questions about this policy or your data can be sent to our support team through the Help/Support link on the site, or by emailing us directly.
10. Vibathlon Trials (play without an account)
You can try the first four Vibathlon games without an account. We do not ask for your name or email to do this. To run your trial we keep a random trial number, your progress and scores, and two scrambled values (a hash of a random value in your cookie and a hash of your network address that changes every day). We use the scrambled values only to limit abuse, such as automated starts. They are not used to identify you. If you do not sign in, we delete your trial when the hold period (60 minutes after you finish) ends. If you create an account or sign in within that time, your Stage 1 results become part of your account’s Vibathlon run, and the temporary trial record is removed.
