What we collect, why, and how to get it back or deleted.
Last updated:
Vibe Village is a project in development, run by Dana Mihaela Jude as a private individual in Romania. There is no registered company behind it yet, so there is no trade register number or VAT identifier to give you.
For anything in this policy, including any request about your own data, write to judedanamihaela@gmail.com. That address reaches the person responsible directly.
If you use the contact form: your name and email address, and optionally your phone number, along with which village interests you, the type of group, how many people and any dates or message you add. We use this only to reply to you and, if you ask, to tell you when the villages open. The legal basis is your consent, and for the reply itself, the steps you asked us to take before any agreement exists.
If you leave a comment on the Journal: the display name you type and the text of your comment. No account, no email address, no password. The legal basis is your consent, given when you submit the comment.
Automatically, for anti-spam only: when you submit a comment, your IP address is converted into a one-way hash and that hash is counted for a few minutes to stop one source flooding the site. The address itself is never written to our database, and the hash cannot be turned back into it. The legal basis is our legitimate interest in keeping the site usable.
There is no analytics on this site. No Google Analytics, no pixels, no advertising or marketing trackers, no fingerprinting, no profiling and no automated decision-making. We do not sell, rent or share your data with anyone for their own marketing.
The site makes no requests to third-party servers as you browse: the fonts, images and video are all served from this domain. Nothing about your visit reaches anyone else unless you actively submit the contact form or a comment.
This site sets no cookies. The only thing stored in your browser is your language choice, kept so the site opens in the same language next time. It holds nothing else, identifies nobody, and is never sent anywhere.
That is why there is no cookie banner: consent is required for tracking, and there is none here to consent to. Clearing your browser storage removes the language preference and nothing else.
Contact form submissions are delivered by Formspree (Formspree Inc., United States), which passes them to an email inbox provided by Google. Both act on our instructions only. Transfers to the United States rely on the European Commission's Standard Contractual Clauses.
Comments are stored by Supabase, on infrastructure inside the European Union. The site itself is hosted by Vercel, which keeps short-lived server logs, including IP addresses, for security and abuse prevention as any web host does.
That is the full list. Nobody else receives your data, and we do not transfer it to any authority unless we are legally required to.
Contact enquiries are kept for as long as we are still in conversation with you and no more than 24 months after your last message, then deleted. If you ask us to delete one sooner, we do.
Published comments stay while the post is published. Comments that are rejected in moderation are deleted within 30 days. The anti-spam hashes described above are deleted within 24 hours.
You can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop using it, object to our use of it, and ask for it in a portable format. Where we rely on your consent, you can withdraw that consent at any time, and withdrawing it does not affect anything done before you did.
Email judedanamihaela@gmail.com and say what you want. We will reply within one month. There is no charge, and you do not have to explain why.
If you think we have handled your data badly, you can complain to the Romanian supervisory authority, ANSPDCP (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal), at www.dataprotection.ro, or to the authority in the EU country where you live.
The site is served over HTTPS only, with a content security policy that blocks any script or connection we have not explicitly allowed. Comments are protected in the database by row-level rules that make it impossible to read or alter anyone else's data through the site, whatever request is sent.
The strongest protection here is simply that we collect very little. There is no password to steal, no account to break into, and no address book.
This site is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has sent us something, write to us and we will delete it.
If this policy changes, the revised version appears here with a new date at the top. We will not quietly start doing something this page says we do not do.