AdvertiseSign inJoin

Privacy Policy

Last updated November 14, 2026.

VibeCodeReviewer (VibeCodeReviewer.net) reviews and lists games made with AI tools. This page explains what we collect, why, who else gets it, how long we keep it and what you can do about it. We don't sell your data, we don't share it for advertising, and we don't use ad trackers or analytics cookies.

Who we are

VibeCodeReviewer is run by an individual (not a company) who operates VibeCodeReviewer, the "controller" of your personal data under the EU and UK GDPR. For anything about your data, email ozmiumofficial@gmail.com or message us on our Discord server. We answer within 30 days.

What we collect

When you sign in

  • Google: only your Google account ID. We don't ask Google for your name, email or photo.
  • Discord: your Discord account ID and Discord username, which becomes your starting username here. We don't ask for your email.
  • Your username: shown publicly next to your reviews and anything you list. Change it any time on your account page.
  • We never see or store a password. There is no password sign-in.

When you use the site

  • Ratings and reviews: your star ratings and any review text. Reviews with text are public, with your username.
  • Hot or Slop votes: stored with your account, shown only as totals.
  • Games you list and claims: game details you enter (including the developer name you give), and the proof you send when you claim a game.
  • Rating rewards: if a game sends you here with a player name to reward you for rating, we store that player name with your rating.

When you buy an ad

  • Your contact email, ad text, link and banner image (or banner link).
  • Stripe takes the payment on its own page. We never see your card. Stripe gives us a payment reference and whether you paid.

Automatically

  • Cookies: two, both needed for the site to work, so we don't ask for consent. vcr_session keeps you signed in for 30 days. vcr_oauth protects sign-in from forgery and lasts 10 minutes. No advertising, analytics or tracking cookies, and nothing in local storage.
  • Server logs: our host, Cloudflare, logs requests (address requested, time, status, rough location and network details including your IP address) to keep the site running and secure. These logs are kept for up to 7 days.

Why we use it (legal bases)

  • To give you the service you signed up for (GDPR Art. 6(1)(b), contract): your account, ratings, votes, listings, claims, rewards and ads.
  • Legitimate interests (Art. 6(1)(f)): keeping the site secure, stopping fake or duplicate ratings, and server logs. You can object to this, see your rights below.
  • Legal obligation (Art. 6(1)(c)): keeping paid ad records for tax and accounting.

We don't make automated decisions about you with legal or similar effects. Game rankings come from rating totals, not from profiling people.

Who else gets it

  • Everyone: your username, public reviews and the games you list. Search engines index public pages.
  • Game developers: if you rate a game through its reward link, we tell that game's developer the player name the game gave us and your stars, so they can send your reward. We never send them your account details.
  • Cloudflare (hosting, database, logs), Stripe (ad payments; gets your contact email and the order), Google and Discord (sign-in, only if you use them). They process data for us under their data processing terms.
  • Image hosts: game covers and screenshots load from the sites that host them, such as itch.io, Steam, Google Play, the App Store and developers' own sites, and ad banners can load from the advertiser's server. Your browser sends those servers your IP address and browser details, the same as visiting any web page. We tell browsers not to send them which page you were on.
  • Social networks: we post our own reviews and blog posts to Facebook, X and Discord. Those posts never contain your personal data.
  • The law: if a valid legal order requires it.

We don't sell personal information or share it for cross-context behavioral advertising, as those terms are used in California law, and we haven't in the last 12 months.

International transfers

Cloudflare, Stripe, Google and Discord process data in the United States and other countries. Where data leaves the EU, EEA or UK, these providers rely on the EU Standard Contractual Clauses, the UK addendum or the EU-US Data Privacy Framework.

How long we keep it

  • Account, ratings, reviews, votes and listings: until you delete your account.
  • Sign-in sessions: deleted when they expire (30 days) or when you sign out.
  • Unpaid ad bookings: deleted after 30 days. Unused banner uploads: deleted after 2 days.
  • Paid ad records: kept as long as tax law requires (up to 7 years).
  • Rejected game claims: deleted after 90 days. Approved claims drop the proof text after 90 days.
  • Server logs: up to 7 days.

Your rights

Wherever you live, you can:

  • Get a copy of your data: your account page has a Download my data button (a JSON file).
  • Correct it: change your username on your account page, or email us.
  • Delete it: see below.
  • Object to or restrict how we use it, or ask us to stop: email us.
  • Complain to a data protection authority. In the EU or EEA that's the authority where you live. In the UK it's the ICO.

California residents have the right to know, delete and correct personal information, and to not be treated differently for using these rights. You can use them as above or through an authorized agent. Other US states with privacy laws give similar rights, and we honor them the same way. We may ask you to sign in or answer questions to confirm the request is yours.

Deleting your data

Go to your account page and use Delete my account. It deletes your account, sign-in links, ratings, reviews, votes, claims and rating rewards right away. Games you listed stay on the site without an owner (email us if you want one removed) and paid ad records stay for tax reasons. If you can't sign in, email ozmiumofficial@gmail.com and we'll do it within 30 days.

You can also remove VibeCodeReviewer from the connected apps page of your Google or Discord account. That stops future sign-ins. To delete what we store, use the button above.

Children

VibeCodeReviewer is for people 13 and older. We don't knowingly collect data from children under 13. If you think a child has an account, email us and we'll delete it.

Security

The site only runs over HTTPS. Sign-in cookies are HTTP-only and secure, and we store sign-in tokens, not passwords. No system is perfect. If a breach affects your data, we'll tell you and the authorities as the law requires.

Changes

When this policy changes, we update the date at the top. If a change affects how we use data you already gave us, we'll post a notice on the site first.

See also our Terms of Use.