Legal
Last updated: October 9, 2026. This policy explains what data VIBESYNCED collects, why, and how you can control it.
The short version
You can use VIBESYNCED without an account, and we never store your music. If you don't sign up, the only data collected is anonymous usage statistics via Google Analytics — page views, session length, and device type.
Accounts are optional. If you create one, we store your email address, a password if you set one, and the profile you choose (handle, display name, and avatar). While you are signed in, we also record which YouTube songs you play and for how long, unless you turn that off. If you buy a membership, we keep a record of it, and Stripe handles your payment details. You can download or delete it all at any time from Account settings. Your uploaded audio files never leave your browser. Read on for the full details.
Data we collect
We use Google Analytics to understand how visitors use VIBESYNCED. Google Analytics automatically collects:
This data is aggregated and anonymized. We use it only to improve the site. We do not use it to identify individual users.
MP3 files you upload are processed entirely in your browser using the Web Audio API. They are never transmitted to our servers. So you can continue where you left off, your most recent upload is kept in your browser's own storage (IndexedDB) on your device, until you upload another file or clear your browser data.
When you search for or stream a YouTube video, your query and the resulting video data are fetched via the YouTube Data API. This data is handled by Google's infrastructure. We do not log or store your YouTube search queries.
VIBESYNCED uses your browser's localStorage to remember things on your device, such as whether you have acknowledged the epilepsy warning, your volume, where you left off, and the songs in Recently played. These values stay on your device and are never sent to us.
If you sign in, your browser also keeps a sign-in token in localStorage so you stay signed in. It is removed when you sign out.
Accounts
Accounts are optional. You only need one for features like adding friends and sending scenes. If you create one, we store:
When you sign in, our authentication provider also records basic sign-in activity, such as the time, your IP address, and your browser, to keep accounts secure and investigate abuse.
Your handle, display name, and avatar make up your public profile and are meant to be seen by other VIBESYNCED users. Your email address is never shown to other users.
Your profile page is private until you turn on Public profile in Edit profile. Once it is public, anyone with the link can see your name, handle, bio, avatar, follower counts, and membership badge. Three more things appear only if you switch them on, each on its own: Listening stats, Playlists (only the ones you have made public), and Activity. You can change any of these at any time.
When you are signed in and play a YouTube song, the player sends us a short update about every 30 seconds. We use these to keep, for each song and each day:
We use this only to show the Listening stats (hours, tracks, and top artist over the last 30 days) and Activity (what you are playing now and what you played lately) on your profile. We do not use it for advertising and we do not sell it. Nothing is recorded when you are signed out or when you play an MP3 from your device.
Recording is on by default for signed-in accounts. To opt out, open Edit profile, go to Listening history, switch off Record my listening, and save. We then stop recording and delete the history already saved. You can switch it back on whenever you like; it starts again from that point.
Recording is separate from who can see it. The Listening stats and Activity switches only control what other people see on your profile. They do not stop the recording. Your history is never shown to others unless your profile is public and the matching switch is on.
History older than 30 days is deleted automatically. Song titles and channel names shown on your profile come from YouTube and are looked up from the video ID; we keep them in a cache for no more than 30 days. Your history is included in Download my data and is deleted when you delete your account.
Pro (a monthly or yearly subscription) and the Founder Pass (a one-time purchase) are paid through Stripe Managed Payments, where Stripe is the seller of record. Your card or other payment details are entered on Stripe's pages and are handled by Stripe. VIBESYNCED never receives or stores them.
We keep only what we need to give you your membership: a Stripe customer reference, which plan you have and whether it is active, the billing period and when it renews or ends, and, for the Founder Pass, your pass number. We use this to switch member features on and off, and we receive updates from Stripe when a payment succeeds, a subscription changes, or a payment is refunded. Stripe also keeps its own records, including your name, email, billing details, and tax information, as described in Stripe's Privacy Policy.
You can manage or cancel a subscription from Account in the app, which opens Stripe's billing page. Stripe, and we where the law requires, may keep records of payments after you delete your account, for as long as tax, accounting, and fraud-prevention rules require.
We only email you about your account: sign-in and sign-up links, email confirmations, password resets, and security notices, for example when your password or email address changes. We do not send marketing emails.
When you enter your email to sign in, we check whether an account exists so we can send you to the right screen. To prevent abuse, we keep a short-lived count of these checks for your IP address, which is deleted after about a minute.
We keep your account data for as long as you have an account. Accounts that haven't been signed in to for two years may be deleted, after an email to let you know. When you delete your account, your profile, playlists, listening history, and sign-in details are deleted right away. Payment records that Stripe or the law require to be kept are not. Copies may remain in our providers' routine backups for a short period before they are overwritten.
From Account in the app, you can:
You can also email us to make any of these requests.
Cookies and tracking
VIBESYNCED itself does not set any first-party cookies. Signing in uses local storage instead (see Local storage above).
Google Analytics sets cookies on your browser to distinguish unique visitors and sessions. These typically include _ga and _ga_*. These cookies expire after two years.
You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by using a browser extension that blocks tracking scripts (such as uBlock Origin).
Third-party services
Google Analytics and the YouTube Data API are services operated by Google LLC. Google's data practices are governed by Google's Privacy Policy.
VIBESYNCED uses YouTube API Services. By using the YouTube features, you agree to be bound by the YouTube Terms of Service. We do not ask you to sign in with your Google account and we do not access your YouTube account or its data. If you have granted any application access to your Google account, you can review and revoke it in the Google security settings.
Song titles and channel names retrieved through YouTube API Services are cached for no more than 30 days and then deleted or refreshed. You can ask us to delete any data we hold about you at any time from Account settings or by contacting support.
We use a small number of service providers to run accounts. They process your data only on our behalf, to provide these services:
Stripe processes payments for Pro and the Founder Pass. Stripe's data practices are governed by Stripe's Privacy Policy.
We do not sell, rent, or share any user data with third parties for their own marketing or commercial purposes.
Your rights
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. If you use VIBESYNCED without an account, we do not collect personally identifiable information. If you create an account, we collect the identifiers, profile details, membership records, and listening history described under Accounts above, and you can turn off the listening history. We do not sell or share personal information. You can see and delete your account data yourself from Account settings, or contact us with any request.
Wherever you live, you can access, correct, download, or delete your account data at any time from Account settings, or by emailing us. We process account data to provide the account you asked for, and you can withdraw by deleting your account.
To stop Google Analytics from tracking your visits, install the Google Analytics Opt-out Browser Add-on or use a privacy-focused browser setting or extension.
VIBESYNCED is not directed at children under the age of 13. Creating an account requires confirming that you are 13 or older. We do not knowingly collect personal information from children. If you believe a child has created an account or provided personal information through the Service, please contact us and we will delete it.
Updates and contact
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
For privacy-related questions or requests, contact us at support@vibesynced.com.
