Privacy Policy

Who is responsible

The site is run by Tilt (https://tilt.ninja/). Questions and requests about your data can be sent through that website.

What we collect

• Discord sign-in: your Discord user ID, username, display name and avatar. The site asks only for the “identify” permission — never your email, servers or messages.
• What you create: memories, events, letters, plans, tracks, postcards and drawings, mood, dates, answers to questions, and chat messages in the shared room. Letters and answers are encrypted at rest on the server when the operator has enabled it.
• Photos you upload, stored in Cloudflare R2.
• Notification settings, if you turn push notifications on: the address of your browser’s push service, its keys, your language and time zone, and which notifications you want.
• Technical data: your IP address is processed by Cloudflare to deliver the site, and a short-lived counter per IP address limits sign-in attempts.

Why we use it

Only to run the site: to sign you in, to keep the couple’s shared data in sync between devices, to show it to the right people, and to send the notifications you asked for.

Who else processes data

• Cloudflare — hosting, database (D1), file storage (R2), real-time rooms (Durable Objects) and, if configured, a relay for screen sharing (TURN).
• Discord — sign-in.
• Push services of your browser (Google, Mozilla, Apple, Microsoft) — delivery of notifications.
• nekos.best — illustrations on the Vibes page are loaded from it directly by your browser, so it sees your IP address.
• YouTube, SoundCloud, Spotify, Deezer, Yandex Music, Apple Music — only when a page with their embed is opened.
• Screen sharing and watching together run directly between the two browsers (WebRTC); the video does not pass through our server unless the TURN relay is needed.

How long we keep it

Data stays until the person who created it deletes it or asks the operator to delete it. Sign-in sessions last 30 days. Rate-limit counters are cleared automatically within minutes.

Your rights

You can see, export, correct and delete your data. Most of it can be done on the site itself (Settings, the edit and delete buttons, “sign out of all devices”); for anything else, contact the operator and the data will be exported or deleted.

Visitors

People who are not signed in see only the sections the couple has made public. Letters and the “miss you” page are never public.

Changes

If this policy changes, the date at the top changes too.