Privacy policy

• We do not sell or rent personal data.
• We show advertising and promoted listings. Ads are labelled, and promoted listings are kept separate from organic results.
• Advertising partners may set cookies or similar identifiers on the pages where their ads appear. You can control this in your cookie and privacy settings where required by your local law.
• Browsing without an account stores your saves and content preferences in your own browser only.
• You can export or delete your account and personal data from your account settings at any time.

VibedSites.ai, operated by Taout, Inc., is the controller of the personal data described here. You can reach us about anything in this policy at admin@VibedSites.ai.

Data you give us. Email address and authentication details when you create an account (including a Google account identifier and email if you sign in with Google); your public username, display name, bio and avatar image; listings you submit and every field in them, including images you upload; comments, reviews, ratings, saves, follows, reports and appeals; messages you send us.

Data created by using the service. Aggregate, per-day counts of views and outbound clicks on listings, used for creator insights; notification and email-preference state; moderation records about content you submitted; security and abuse-prevention signals such as coarse request metadata, timestamps and rate-limit counters; standard server logs including IP address and user agent, kept for security and debugging.

Data stored on your device. A sign-in session token, your local saves and content preferences before you sign in, your privacy choice, and a per-session identifier used to avoid counting the same visit twice. If you accept measurement, Google Analytics also stores its own cookies on your device. Where advertising is shown, our advertising partners may also store cookies or similar identifiers on your device to measure and select ads, subject to your consent where local law requires it.

Measurement with Google Analytics. We use Google Analytics 4, loaded through Google Tag Manager, to count page views and a small number of actions: a search was run, a listing page was viewed, a listing's outbound link was clicked, and a site was saved. Nothing loads and no cookie is set until you accept in your privacy choices, and declining keeps it off. What we send is limited to the page address without its query string or fragment, the page title with any quoted search text removed, the previous page address, and the public identifier or destination domain of a listing where the action concerns one. We do not send your name, email address, username, account identifier, what you type into search or forms, or details of listings that are not published. Measurement is limited to the public pages of vibedsites.ai; sign-in, account, dashboard, insights, reporting, unsubscribe and staff pages are excluded entirely, page titles included. Advertising storage, personalised advertising and Google's use of this data for its own advertising signals remain switched off. You can change or withdraw your choice at any time through the privacy choices link in the footer; withdrawing switches measurement off and deletes the Google Analytics cookies from your browser. We honour recognised browser opt-out signals, including Global Privacy Control and Do Not Track, by leaving measurement off without asking.

Advertising and promoted listings. We show advertising and paid promoted listings. Ads and promoted placements are labelled, and paid placement never changes organic ranking. Advertising partners may receive limited technical data needed to serve and measure an ad, such as IP address, user agent, the page the ad appeared on and interaction events. We do not give partners your email address, and we do not sell your personal data. Where we act as a controller for measurement data we rely on your consent for non-essential advertising cookies in regions that require it, and on legitimate interests for fraud prevention and basic delivery reporting.

What we do not collect. No payment card data (we do not take card details on the site), no precise location, no contact-list or device-file access, no biometric data, and no special-category data. Do not send us sensitive personal information.

• To provide the service: accounts, sign-in, saves, submissions, comments, reviews and creator insights. Basis: performance of a contract with you.
• To review submissions and keep the index safe, through automated and human screening of listings, images, comments and reviews, and enforcement of the guidelines. Basis: legitimate interests in a safe, lawful, non-deceptive index, and compliance with legal obligations.
• To prevent fraud, spam, rating manipulation and unauthorised access. Basis: legitimate interests and legal obligations.
• To send service messages you can control, such as review outcomes, replies, mentions and follows. Basis: contract, or your consent where required.
• To understand which listings people find useful, using aggregate counts rather than individual profiling. Basis: legitimate interests.
• To show and measure advertising and promoted listings, and to bill advertisers accurately. Basis: legitimate interests for non-personalised delivery and fraud prevention, and your consent for personalised advertising where local law requires it.
• To comply with law and to respond to valid legal requests, including mandatory reporting of child sexual exploitation material. Basis: legal obligation and vital interests.

Where we rely on consent, you can withdraw it at any time; where we rely on legitimate interests, you can object and we will re-assess.

Published listings and their fields, your public username, display name, bio and avatar, your comments and reviews, your ratings in aggregate, and your follower and following lists are visible to anyone. Your email address, saves, content preferences, creator insights, reports you file and moderation records about you are not public. Anything you publish may be cached, indexed by search engines or copied by others, so only publish what you are comfortable making permanent.

We share personal data only with processors acting on our instructions, and only with what they need, plus the advertising partners described below:

• hosting, database, authentication and file storage for running the service;
• email delivery for account and notification messages;
• an AI provider for automated content screening of the text and images you submit. Content is sent for a screening decision and is not used by us to train third-party models;
• security and error-monitoring tooling;
• advertising and measurement partners, which receive limited technical data needed to serve, cap and measure ads on the pages where those ads appear.

We may also disclose data where legally required, to enforce our terms, to protect people from imminent harm, or as part of a merger or acquisition, in which case we will tell you before your data becomes subject to a different policy. We do not sell personal data for money. Depending on where you live, sharing data with advertising partners for personalised ads may count as sharing for cross-context behavioural advertising, so you can opt out of personalised advertising in your privacy settings, and we honour recognised opt-out signals such as Global Privacy Control.

Our providers may process data in countries other than yours, including the United States. Where personal data leaves the EEA, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses together with additional technical measures including encryption in transit and at rest.

• Account and profile data: while your account exists, then deleted on account deletion.
• Listings, comments and reviews: while published, or until you delete them; anonymised or removed on account deletion.
• Uploaded images: deleted with the listing or profile they belong to, subject to short backup retention.
• Aggregate daily metrics: retained in aggregate form that does not identify you.
• Moderation and enforcement records, including bans and safety reports: retained for as long as needed to prevent repeat violations and to meet legal obligations.
• Server and security logs: a short rolling window, typically no more than 90 days, unless needed for an active investigation.

Access to data is restricted by row-level database policies so that each person reaches only their own records; privileged operations run server-side after the caller is authenticated and authorised. Uploaded images are stored privately and served through short-lived signed links. Traffic is encrypted in transit. No system is perfect; if a breach affects your personal data and the law requires notification, we will notify you and the relevant regulator without undue delay.

Depending on where you live, you can request access to your personal data, correction, deletion, a portable copy, restriction of or objection to processing, and withdrawal of consent. Residents of California and other US states with comparable laws may request to know, delete and correct, may opt out of any sale or sharing (we do neither), and will not be discriminated against for exercising these rights. Residents of the EEA, the UK and Switzerland may also lodge a complaint with their local supervisory authority.

Start most requests yourself in account settings, including profile edits, listing deletion, email preferences and permanent account deletion. For anything else, contact us; we verify requests against the account they concern and answer within the period the applicable law requires, normally within 30 days. You may use an authorised agent where the law allows it.

Automated screening can hold a submission back from publication, request changes, or route it to human review. It never permanently deletes an account or a listing. Decisions that materially affect you are reviewable by a person on request through the contact page.

The service is general-audience and is not directed at children. You must be at least 13 years old to hold an account, or older where local law requires. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete the account and the data.

Listings link out to websites we do not operate. Once you follow a link, that site’s own privacy policy and tracking apply. We do not pass your personal data to a listed site when you click through.

We will update the “last updated” date above when this policy changes, and give notice in the service or by email before material changes take effect.