Effective: November 1, 2026
Boundary Crosser (the “Operator”) processes only the minimum information needed to run Vibe Chart (vibe-chart.app). There is no sign-up, so we never ask for your name, phone number or password.
1. What we process, why, and for how long
| Feature | Data | Purpose | Retention |
|---|
| Browser identification | A random browser ID (cookie). The server stores only an irreversibly transformed (hashed) value | Preventing duplicate hearts, keeping your chat nickname | Cookie: until you clear it / Server: per feature below |
| Hearts | Hashed browser ID, hashed IP address and browser info (originals are not stored) | Preventing duplicate or fraudulent votes | Until you remove the heart or the space is deleted |
| Chat | Auto-assigned nickname, message text, hashed browser ID | Providing live chat, handling rule violations | Messages: up to 24 hours (only recent ones kept) / Nickname and restrictions: while the Service runs |
| Space submissions | Title, URL, description, Threads account (optional), languages | Review and listing | While listed; deleted on request |
| Edit/removal requests | Request text, contact (Threads ID or email) | Verifying ownership, handling and replying | 1 year after the request is resolved |
| Search terms | Search text, number of results, page language (not linked to who searched) | Improving search, statistics | Kept as statistics |
| Language statistics | Visit counts per browser language (numbers only) | Prioritising translations | Kept as statistics |
| Access logs | IP address, browser info, time, requested URL | Security, troubleshooting, abuse prevention | Oldest entries deleted automatically once logs exceed about 30 MB |
2. Cookies
- Browser ID: tells whether hearts and chat come from the same browser.
- Language: remembers the language you chose (1 year).
- Session: needed for security, such as protecting forms against forgery.
- Visit statistics (Google Analytics): we look at aggregated, non-identifying statistics about which pages are viewed to improve the Service. Google sets cookies (such as _ga); you can opt out with the Google Analytics opt-out add-on.
You can clear or block cookies in your browser settings. Your hearts and chat nickname may then be reset.
3. Advertising
The Service may show third-party ads such as Google AdSense. Ad vendors, including Google, may use cookies to serve ads based on your visits to this and other websites. You can turn off personalised ads in Google Ads Settings. See Google’s advertising policies for details.
4. Sharing and processors
We do not share personal information with anyone except where required by law. Data is stored on servers managed directly by the Operator, and processing is not outsourced.
5. External sites
Listed spaces are external sites run by their creators, and their own privacy policies apply there. Links to them carry a referral tag (e.g. utm_source=vibe-chart.app).
6. Deletion
Data whose retention period has ended, or whose purpose has been fulfilled, is deleted promptly and irrecoverably.
7. Your rights
You can ask to access, correct, delete or stop processing the submissions and requests you left, by emailing us below. We handle requests promptly after confirming your identity. Data identified only by browser ID (hearts, chat) is no longer linked to you once you clear your cookies.
8. Children
We do not knowingly collect personal information from children under 14. If you are under 14, please do not leave contact details in submissions or requests.
9. Security
All traffic is encrypted (HTTPS), browser IDs and IP addresses are stored only in hashed form, and the admin area is restricted to the Operator.
10. Privacy contact
Boundary Crosser · [email protected]
11. Changes to this policy
We will announce changes on the Service at least 7 days before they take effect.