This policy explains what personal data VIBEWARS collects, why, who receives it and what rights you have over it. It applies to the VIBEWARS website (vibe-lab-app.web.app) and the VIBEWARS apps for iOS and Android.
VIBEWARS is operated by:
| Company | DNA TECHBASE S.R.L. (limited liability company, Romania) |
|---|---|
| Registered office | Aleea Romanilor nr. 23, bl. 12, sc. 2, ap. 107, Municipiul Deva, jud. Hunedoara, 330107, Romania |
| Unique registration code (CUI) | 52084942 |
| Trade register number | J2025048383009 |
| EUID | ROONRC.J2025048383009 |
| Contact | contact@dnatechbase.com |
For the purposes of the EU General Data Protection Regulation (GDPR), DNA TECHBASE S.R.L. is the data controller for the data described below.
When you create an account we store your email address and an internal account identifier, the sign-in method you used, and — depending on that method — a display name and profile picture.
Some contests have an entry fee, which can be paid only on the website, through Stripe Checkout. Stripe collects your card details directly; we never see them. Stripe tells us that the payment succeeded, and we store a record of your contest pass: the contest, the amount, the Stripe session reference and the email address you gave Stripe. Contests in the iOS and Android apps are free and involve no payment.
If you switch on push notifications, we store a device token from Firebase Cloud Messaging (and, on the web, your browser's push service) so we can deliver them, along with the type of device. Turning push off, or deleting your account, removes it.
When you attach a photo or video to an entry, your device may ask for permission to use the camera, the photo library or, for recording video, the microphone. We only receive the file you choose; we do not read the rest of your library or record anything on our own.
The apps and website keep some data in your device's local storage so they start quickly and keep you signed in: your sign-in session, a small copy of your account (identifier, name, email and picture), cached public contest data, and settings such as visual effects. Signing out clears the cached account data and contest data.
If the app crashes or a screen fails, Firebase Crashlytics sends us a report: the error and where in our code it happened, the app version, device model and operating system version, and your account identifier (never your email). We use these only to find and fix bugs.
Our hosting and backend providers process your IP address and basic request information as a normal part of serving the app and protecting it against abuse. We do not combine this with your profile to build behavioural records.
VIBEWARS contains no analytics SDK, no advertising SDK and no third-party tracking (crash reports are used only to fix bugs). We do not track you across other apps or websites, we do not sell or rent personal data, and we do not use it for advertising. We do not process payment card details, and we do not access your location, contacts or health data. We do not currently send notification emails.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and maintaining your account; letting you sign in | Performance of a contract (Art. 6(1)(b)) |
| Publishing your entries, comments and (if you publish it) your profile; running contests and calculating scores | Performance of a contract (Art. 6(1)(b)) |
| Selling and recording contest passes on the website | Performance of a contract (Art. 6(1)(b)); legal obligation for accounting and tax records (Art. 6(1)(c)) |
| In-app notifications about contests you entered or follow | Performance of a contract (Art. 6(1)(b)) |
| Push notifications | Your consent (Art. 6(1)(a)), given by turning them on; you can turn them off at any time |
| Crash and error reports, to find and fix bugs | Legitimate interests (Art. 6(1)(f)) in a working app |
| Moderating content, handling reports, preventing abuse and keeping the service secure | Legitimate interests (Art. 6(1)(f)) in a safe platform |
| Responding to your questions and requests | Legitimate interests (Art. 6(1)(f)); legal obligation where the request concerns your data rights |
VIBEWARS is a public contest platform. Approved entries, the name and picture shown with them, comments, published creator profiles and contest results are visible to anyone, including people who are not signed in. Your email address is not shown on your entries or profile. If your account has no display name, your entries and comments are shown as "Vibe coder".
Please do not put anything in an entry, prompt, comment, profile or uploaded file that you would not want to be public.
We do not sell your data. We share it only with the providers we need to run VIBEWARS, who act as processors on our instructions, and with the services you choose to use:
| Provider | What they handle |
|---|---|
| Google — Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Firebase Hosting, Firebase Cloud Messaging, Firebase Crashlytics | Sign-in, the database, uploaded files, backend logic, website hosting, push notifications and crash reports |
| Google Sign-In / Sign in with Apple | Authentication, if you choose to sign in with Google or Apple |
| Stripe | Payments for contest passes on the website (Stripe also acts as an independent controller for payment processing) |
| Slack (Salesforce) | Alerts to our moderators when content is reported or an entry needs review. An alert contains the reported content or entry title, the report reason and the reporter's account identifier — never their email |
| YouTube (Google) and Loom | Only when you tap Play on a demo video an entrant linked; the player then loads from YouTube's privacy-enhanced (nocookie) domain or from Loom |
We may also disclose data where we are legally required to, or where it is necessary to establish, exercise or defend legal claims.
Our database and backend run in Google Cloud's United States regions (us-central1 and us-east1). Stripe and Slack may also process data in the United States. Transfers outside the European Economic Area are covered by the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for more detail using the contact address above.
You can delete your account in the app or on the website: Profile → Delete account (you will be asked to confirm your identity). If you have not verified your email yet, the same option is on the verification screen. You can also email contact@dnatechbase.com from the address registered to the account; we act on emailed requests without undue delay and within one month. More detail: vibe-lab-app.web.app/delete-account.
Deleting your account removes your sign-in account, entries (with their files, likes and comments), your comments and likes elsewhere, your profile, contest passes, follows, notifications, push tokens and blocks. If you signed in with Apple, we also ask Apple to revoke VIBEWARS' access. Published results of a concluded contest may continue to show the ranking without your entry.
Under the GDPR you have the right to:
To exercise any of these, email contact@dnatechbase.com.
If you believe we have handled your data improperly you may complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania — dataprotection.ro. If you live in another EU or EEA country you may instead complain to your local authority.
VIBEWARS is not intended for children. You must be at least 16 years old to create an account. If you believe a child has given us personal data, contact us and we will delete it.
Access to stored data is governed by server-side security rules, so content can only be written or changed by the account that owns it, or by a moderator. Traffic between the apps and our backend is encrypted in transit. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
If we change this policy we will update the date at the top of this page, and where the change is significant we will make a reasonable effort to tell you in the app.
Questions about this policy or about your data: contact@dnatechbase.com