Last updated: June 8, 2026
The short version
- No third-party trackers. No ad networks. No data sale, ever.
- You can browse without an account.
- You can sign up with just a username and a 6-digit PIN — no email required.
- You can export or delete your data at any time.
1. What we collect
Account data
- Username, and optionally email and/or Google ID if you choose those sign-in methods.
- A hashed PIN or password — we never see the original.
- Profile fields you fill in (bio, avatar).
Content
- Posts, comments, votes, gifts, messages, and community subscriptions.
Technical data
- IP address and user agent for security and abuse prevention (kept for up to 30 days).
- Server logs of requests, kept for up to 14 days.
- A single first-party session cookie. No analytics SDKs, no Facebook pixel, no Google Analytics.
Payment data
- Handled by Stripe. We store only the subscription ID and customer ID — never card numbers.
2. Why we use it
- To run the Service and show your communities to you.
- To keep accounts and content safe (rate-limiting, spam and abuse detection).
- To process payments for Premium and coins.
- To send transactional emails you opted in to (password reset, receipts).
3. Who we share it with
We share data only with the providers we need to run the Service:
- Our hosting and database provider (for storage and serving the site).
- Stripe (for payments).
- Law enforcement, only when legally compelled — and we will tell you unless legally prohibited.
We do not sell, rent, or share your personal data for advertising. Ever.
4. Your rights
Wherever you live, you can:
- Access a copy of your data.
- Correct profile information.
- Delete your account, which removes your profile and orphans your posts (or fully deletes them on request).
- Object to processing or withdraw consent.
Email privacy@toastvibe.com and we'll respond within 30 days.
5. Retention
- Account data: until you delete your account.
- Posts and comments: until you or a moderator delete them, or the community is closed.
- Moderation logs: kept indefinitely for transparency, with username only.
- Server / IP logs: 14–30 days.
6. International transfers
Our servers may be located outside your country. Where required, we use standard contractual clauses with our providers.
7. Children
ToastVibe is not directed at children under 13. If you believe a child has created an account, contact us and we'll remove it.
8. Changes
We'll post any material privacy changes on the site at least 14 days before they take effect.
9. Contact
Data Protection: privacy@toastvibe.com