What we know about you. And what we do with it.

Who runs this.

Vibe Designs is a studio of one — sole proprietor, based in London, United Kingdom. Vibe is both the studio and the person.

For privacy purposes the studio is the data controller. All correspondence about your data can be addressed to hello@vibedesigns.studio.

What data we collect.

Account data: when you sign in to the app, an account record is created via the Base44 authentication layer. The record contains your email address, display name (if provided), and a system identifier. No payment details are stored on the studio's side — all invoicing happens via separate platforms (bank transfer or Stripe).

Contact form submissions: when you send a message via the /contact form, we store your name, email, and message contents in our system for the purpose of replying. After we reply, the message stays in the system for up to 24 months unless you ask us to delete it sooner.

Engagement signals: anonymous page views per route, and a small "engagement counter" that aggregates clicks on featured work. No individual user is identified in these counts.

Push notification subscriptions: if you opt in to push notifications via /settings, the browser provides us an endpoint URL and a pair of cryptographic keys. These are stored against your account so we can send pushes. No content from your device is transmitted — we cannot see what is on your screen or what apps you use.

Third-party services we use.

Base44: provides authentication, the database, edge functions, and file storage. Base44 is the only essential service provider. Their privacy policy applies to data we store with them.

Browser-provided push services: when you enable push notifications, the actual delivery goes through Apple Push Notification Service (iOS / macOS Safari) or Firebase Cloud Messaging (Chrome / Android). We send pushes to your subscription endpoint; the delivery infrastructure is operated by the OS vendor.

GitHub: the repository for this site is hosted on GitHub. If you sign in via GitHub OAuth, your GitHub identifier is stored against your account.

No analytics, no tag managers, no marketing pixels, no session-replay vendors. The studio does not run any of these.

How we use your data.

Service operation: keeping you signed in, showing you the right pages, sending you the notifications you asked for.

Reply to messages: if you write to us, we read it and write back. That is the entire pipeline.

Improve the site: anonymous engagement counts help us see which pages people read. No individual-level analysis.

We never use your data for advertising, behavioural retargeting, or profile-building. We do not train any AI models on your data.

How long we keep it.

Account data: kept while your account is active. If you delete your account, all account records are removed within 30 days from primary storage and within 90 days from backups.

Contact form messages: up to 24 months unless you ask us to delete sooner.

Engagement counters: anonymous and rolling — kept for up to 12 months.

Push subscriptions: kept while you remain subscribed. Toggling push off in /settings removes the subscription immediately.

Cookies + local storage.

No third-party cookies. No tracking pixels. The site uses only the following first-party local-storage keys, each stored in your browser only:

Authentication uses a secure session cookie set by Base44. It is HTTP-only, SameSite=Lax, and has no marketing or tracking purpose.

You can clear any of the above at any time via your browser's site-settings panel.

Your rights (UK GDPR + EU GDPR).

You can ask us to: confirm what data we hold about you (the right of access), correct it if it is wrong (right of rectification), delete it (right of erasure), restrict how we use it, object to our processing, or receive a portable copy.

To exercise any of these, email hello@vibedesigns.studio. We will respond within 30 days.

You can also withdraw push-notification consent at any time in /settings — no email needed.

If you believe we have mishandled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your national data-protection authority.

Children's privacy.

The studio does not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

International transfers.

Base44 servers and the studio operate primarily in the EU and UK. If data crosses borders, we use Standard Contractual Clauses or equivalent safeguards.

Changes to this policy.

If we materially change this policy, the version number at the top changes and the effective date updates. For consequential changes (e.g. a new third-party service), we will email account holders before the change takes effect.