VYBECHECK · EARLY ACCESS · 21 OCTOBER 2026
Your privacy, in plain words.
Anonymous to the recipient
Recipients never receive sender names, emails, Instagram handles, raw IP addresses, exact hardware models or precise locations. Plus recipients may see broad automatic hints described below. You do not need to sign in to send feedback. Anonymity does not mean the service has no technical information.
What the service processes
Profile owners authenticate using Google sign-in; we store the Google account identifier, verified email and a hashed session token, never Google access tokens. We store a site-specific account identifier, your chosen Vybecheck handle, optional self-provided Instagram handle, profile settings, and feedback. For abuse prevention we compute a keyed hash of the sender network address. We do not store the raw address in the application database. The hosting provider may process connection logs under its own policies. Network hashes can associate submissions from the same network and are never sent to recipients.
Optional notifications
If you enable notifications, we store your browser push subscription encrypted and your alert preferences. Generic message alerts contain no message text or sender details. Your browser’s push provider delivers the alerts. You can switch off message, visit or promotional Premium reminders in Settings, or turn off notifications on each device. Premium reminders run every 48 hours only while opted in and without Plus. Devices and browser settings may delay delivery.
Encryption & access
Messages and report text are encrypted with AES-GCM before database storage. HTTPS protects transit. Ratings and profile settings are stored in D1. This is not end-to-end encryption: authorized moderators can read reported or automatically held content. Private feedback APIs enforce account ownership.
Retention & deletion
Feedback remains until you delete it or your profile. Account deletion removes the profile, feedback, associated reports and block records. Rate-limit and visit-deduplication records expire within 24 hours and are removed on subsequent successful submission. Limited moderation audit records remain for accountability. Hosting backups and infrastructure logs may remain according to provider retention. A documented production retention schedule is required before public launch.
Sharing & choices
Written messages are private by default. You can download a chosen feedback card, making your own decision to share it elsewhere. Aggregate scores are private unless you switch on public averages. You may pause messages or ratings at any time. We do not offer paid sender identity reveals or fabricated engagement.
Paid insights and payments
Plus provides private rating trends and up to three automatic hints on new feedback: device category, browser family, and approximate network country when available. The sending page explains sharing before submission. By sending you share the collected hints with the recipient if they have Plus now or buy it later. Device and browser are inferred from request headers; country uses Cloudflare network metadata and may reflect a VPN or proxy. We store only these coarse labels, encrypted using the message key, not the raw user-agent string or raw IP address for hints. These hints are not verified identities and are not reliable evidence of who sent feedback. We do not look up contact lists, Instagram accounts, follower relationships or browsing history. Older voluntary context remains labelled as sender-shared; older messages without automatic metadata receive no retrospective hints. Hints are deleted with feedback or the profile. Payments are handled by Razorpay; our database records order identifiers and paid entitlement status, not full card details.