vvd logo

privacy policy

Last updated: January 2025

1. Introduction

Welcome to VVD ("we", "our", or "us"). We're committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our world-building platform and related services (collectively, the "Service").

By using VVD, you agree to the collection and use of information in accordance with this policy. If you don't agree with any part of this policy, please don't use our Service.

2. Information We Collect

Information You Provide:

  • Account information (email address, display name, profile picture from OAuth providers)
  • Content you create (worlds, stories, characters, images, and other creative works)
  • Communications with us (support requests, feedback)
  • Payment information (processed securely through Stripe - we don't store card details)

Information Collected Automatically:

  • Usage data (features used, time spent, interaction patterns)
  • Device information (browser type, operating system, screen resolution)
  • Log data (IP address, access times, pages viewed)
  • Cookies and similar technologies for authentication and preferences

OAuth Information:

When you sign in with Google or Discord, we only receive basic profile information (email, name, profile picture) that you've authorized. We don't access your contacts, posts, or other private data from these services.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our Service
  • Authenticate your account and enable features
  • Process payments and manage subscriptions
  • Send service-related communications (not marketing without consent)
  • Respond to support requests and user feedback
  • Monitor usage to improve performance and user experience
  • Detect and prevent fraud, abuse, or security issues
  • Comply with legal obligations

4. How We Share Your Information

We don't sell your personal information. We only share your information:

  • With your consent: When you explicitly agree to share
  • For published content: Worlds/sites you choose to make public
  • Service providers: Trusted partners who help us operate (Supabase for hosting, Stripe for payments, analytics services)
  • Legal requirements: If required by law or to protect rights and safety
  • Business transfers: In connection with a merger or acquisition (with notice)

5. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption in transit (HTTPS) and at rest
  • Regular security audits and updates
  • Access controls and authentication requirements
  • Secure cloud infrastructure (Supabase/AWS)
  • Regular backups to prevent data loss

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and personal data
  • Portability: Export your creative content
  • Opt-out: Unsubscribe from marketing communications
  • Restriction: Limit how we process your information

To exercise these rights, contact us at hi@vvd.sh. We'll respond within 30 days.

7. Cookies and Tracking

We use essential cookies to:

  • Keep you logged in
  • Remember your preferences
  • Ensure security
  • Provide basic analytics (privacy-focused)

We don't use third-party advertising cookies or sell data to advertisers. You can control cookies through your browser settings, but this may affect functionality.

8. International Data Transfers

Our servers are located in the United States. If you're accessing VVD from another country, your information will be transferred to and processed in the US. We ensure appropriate safeguards are in place for international transfers in compliance with applicable laws.

9. Children's Privacy

VVD is not intended for children under 13. We don't knowingly collect personal information from children under 13. If we learn we've collected such information, we'll promptly delete it. If you believe we have information from a child under 13, please contact us immediately.

10. Data Retention

We retain your information for as long as necessary to provide our Service and comply with legal obligations:

  • Active account data: Retained while account is active
  • Deleted content: Removed within 30 days
  • Backup data: Retained for up to 90 days
  • Legal/compliance data: As required by law

11. Third-Party Services

We integrate with these third-party services:

  • Supabase: Database and authentication
  • Stripe: Payment processing
  • Google/Discord: OAuth authentication
  • Cloudflare: CDN and security

Each service has its own privacy policy. We encourage you to review them.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

  • Right to know what personal information we collect
  • Right to delete personal information
  • Right to opt-out of sale (we don't sell personal info)
  • Right to non-discrimination for exercising privacy rights

13. European Privacy Rights (GDPR)

If you're in the EU/EEA, you have additional rights under GDPR:

  • Clear legal basis for processing (consent, contract, legitimate interest)
  • Right to object to processing
  • Right to lodge a complaint with supervisory authorities
  • Enhanced data portability rights

14. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of material changes by:

  • Posting the new policy on this page
  • Updating the "Last updated" date
  • Sending an email for significant changes

Continued use after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.

back