Privacy policy
🔒 Private stays private: we never read, scan or analyse your private messages — not even anonymised — and use them for nothing but delivery. Our commitments in plain language: our privacy promise.
Version 2026-10-14. The German version is binding. In short: we collect as little as possible, sell nothing, never use your interest profile for advertising, and keep sensitive data (date of birth, IP addresses) encrypted and separate.
1. Controller
Blackriver Fintech OÜ (osaühing (OÜ), private limited company under Estonian law), Ruunaoja tn 3, 11415 Tallinn, Estonia. Represented by Simon Hecht and Jasper Reichardt. Privacy requests: [email protected].
2. What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Google account ID, email, name (Google sign-in) | Sign-in, account | Art. 6(1)(b) GDPR (contract) | Until account deletion |
| Profile: handle, display name, bio, links, theme, visibility settings | Providing your page | Art. 6(1)(b) | Until you delete it |
| Optional profile details (e.g. location, workplace, school, relationship status, gender, custom fields), each with its chosen visibility | Showing them on your page to the audience you choose | Art. 6(1)(b); for sexual orientation, explicit consent under Art. 9(2)(a) GDPR, withdrawn any time by clearing the field | Until you remove them; never used for ranking, ads or targeting |
| Messages (content, time, participants, attachments: images without metadata, files, voice messages) | Delivering your conversations; moderation only when a specific message is reported (then including its attachments) | Art. 6(1)(b) | Until account deletion, when your sent messages are deleted. Messages are encrypted in transit but not (yet) end-to-end encrypted |
| Applications (name and email from your Google account, your text, links, decision) | Review of your application by our moderation team | Art. 6(1)(b) (pre-contractual) | Until the decision; approved ones until account deletion, denied ones 90 days after the decision |
| Photo tags (who tagged whom where in a picture) | Shown on the photo and in the "Photos of …" tab; tagged people are notified and can remove the tag at any time | Art. 6(1)(b) | Until the tag or the post is deleted |
| Songs and recordings (audio file, length, title/artist tags from the file) | Playback on your page at the visibility you chose | Art. 6(1)(b) | Until you delete the post or your account |
| GIF search in chats (search words) | Vise asks GIPHY (Giphy, Inc., USA) with your search words, without passing on your IP address, name or account; previews and sent GIFs are served by Vise itself | Art. 6(1)(b) | We don't store search words; sent GIFs like other attachments |
| Embedded players on pages (Spotify, YouTube, SoundCloud) | Only loaded when you tap "Load player" or allow the provider permanently (stored in your browser). Only then does the provider receive your IP address and may set cookies (YouTube in its privacy-enhanced "nocookie" mode) | Art. 6(1)(a) (consent) | You can withdraw by clearing vise.social's site data in your browser |
| Picture signature: invisible watermark (random identifier) and — for public pictures — your @handle as author/copyright data inside the file | Protecting your work: proving origin of copies and in copyright cases (only the moderation team can resolve an identifier). In private chats only the identifier, never your name | Art. 6(1)(b) and (f) | Switch off under "Edit page → Sign my pictures" (applies to new pictures); the mapping is deleted with the picture |
| Spam and bot protection (counters of how often you comment, post, message or connect in a short time; a short fingerprint of repeated post and comment texts; when something looks off, a "person check / block" counter with the reason) | Protecting Vise from spam and bots. Private messages are only counted, their content is never looked at. The person check runs in your browser without any third party | Art. 6(1)(f) | Counters 15 minutes to 24 hours in memory; spam signals per member until account deletion |
| Email and password sign-in (email address, the password only as an irreversible scrypt hash, times, one-time links only hashed) | Signing in without Google, confirming your email address, resetting your password (links also to your confirmed backup email) | Art. 6(1)(b) | Until account deletion; confirmation links are valid for 24 hours, reset links for one hour |
| Bug reports and ideas (title, text, optional screenshot, page, browser type) | To fix bugs and improve Vise; only the Vise team sees them, you see their status and our answer | Art. 6(1)(b) and (f) | Until you delete your account |
| Member number (order of joining; the first 500 are founding members) | The founding-member badge on your page | Art. 6(1)(b) | Until account deletion; numbers are never reused |
| Shorts you watch (member ID, how much you watched, when) | To count views once per person, move what you've seen to the back and show creators how many people watched — never who | Art. 6(1)(b) and (f) | Until the Short or your account is deleted |
| Videos and photos for Shorts while you create them | To make your Short on our servers (trim, music, text) | Art. 6(1)(b) | Deleted after publishing; unpublished after one day at the latest |
| Active sessions (browser and system type, sign-in and last-activity time, no IP address) | So you can see where you're signed in and end sessions | Art. 6(1)(b) and (f) | While the session is active; ended sessions for 30 days |
| Backup email address (optional) | To reach you about your account, for example if you lose access to your Google account; never for advertising | Art. 6(1)(a) | Until you remove it or delete your account |
| Members you blocked or muted | To make blocking and muting work (hiding content and notifications, preventing contact). Blocked members aren't told | Art. 6(1)(b) | Until you lift it or delete your account |
| Reactions (who reacted how to which post) | Shown under the post; your reactions shape your feed order (visible under "My algorithm") | Art. 6(1)(b) | Until you take them back or delete your account |
| Time of your last activity | Internal only: no email notification while you're on Vise. Never shown to anyone | Art. 6(1)(f) | Continuously overwritten; deleted with your account |
| Posts and other content, incl. chosen visibility | Publishing as you choose (private / members / public) | Art. 6(1)(b) | Until you delete it |
| Date of birth (encrypted, stored separately) | Age check (16+), protective defaults for 16–17-year-olds | Art. 6(1)(c) (protection of minors, Art. 28 DSA) and (f) | Until account deletion; only "16–17" or "18+" is visible |
| IP addresses at sign-up and sign-in (encrypted) | Security, abuse prevention, lawful requests by authorities | Art. 6(1)(f) and (c) | 90 days |
| Invitations: the invitee's email address | Delivering the invitation, invitation chain | Art. 6(1)(f) (legitimate interest in a curated community) | 30 days; if accepted, until account deletion |
| Member emails (news): email address, language, whether a page is set up, time of last activity, which of these emails was sent when | Rare notes to registered members (e.g. "your page is waiting", what's new) — each at most once, at most one in 30 days, never to minors, no open or click tracking | Art. 6(1)(f) (legitimate interest in informing existing members about our service; object at any time with one click in every email or in Settings) | Send log until account deletion |
| Link previews: title, short description and picture of public web pages linked in posts | Preview cards below posts. Vise fetches the page itself and shows its own copy of the picture — reading a post never contacts the linked site, your IP address is not sent to third parties. Tracking parameters are removed from the link. | Art. 6(1)(f) (legitimate interest in a data-minimising display) | Cache up to 7 days; the card stays with the post until it is deleted |
| Feed signals: "more/less like this", interest profile, hashtags you follow or mute | Personalised feed, bubble challenges | Art. 6(1)(b) | Until reset or account deletion; visible and resettable in settings |
| Reports (reporter, reason, note) | Moderation, DSA obligations | Art. 6(1)(c) and (f) | Up to 12 months after closure |
| Acceptance of the terms (version, time) | Proof | Art. 6(1)(b) and (c) | Until account deletion |
We sell no data. Your interest profile is never used for advertising, and there is no micro-targeting.
3. Cookies and ad measurement
- Necessary: a session cookie that keeps you signed in, and a cookie that stores your cookie choice (§ 25(2) TDDDG). No consent required.
4. Recipients and processors
- Google Cloud (Google Ireland Ltd.): hosting, database (Firestore), compute; data processing agreement under Art. 28 GDPR, EU data centres.
- Google Sign-In: signing in with your Google account.
- Cloudflare (Cloudflare Inc.): delivery and attack protection, processing IP addresses; US transfers under the EU-US Data Privacy Framework and standard contractual clauses.
- Email delivery of invitations through our own communication service on Google Cloud.
- Authorities, where the law requires it.
5. Public content
Whatever you mark "public" is reachable without login and may be indexed by search engines. Pages of members under 18 are never indexed. You can change visibility or delete content at any time; copies in search-engine caches are outside our control.
6. Feed algorithm
Your feed is ranked by your explicit signals and contains marked "outside your bubble" items. Ranking has no legal effect on you (Art. 22 GDPR). A chronological feed is always available (Art. 27, 38 DSA).
7. Minimum age
Vise is for people aged 16 and over. Members aged 16–17 get protective defaults and never see profiling-based advertising.
8. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection to processing based on legitimate interests (Art. 21) and withdrawal of consent (Art. 7(3)). Write to [email protected]; account deletion and data export are also available directly in settings. You may complain to any data-protection supervisory authority, in particular in your country of residence. The lead authority at our seat is Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), Tatari 39, 10134 Tallinn, www.aki.ee.
9. Security
All traffic uses TLS. Date of birth and IP addresses are encrypted per field and stored apart from your profile with restricted access. We keep as little as possible: if we ever check IDs, we keep only the result, never the document.
10. Changes
If this policy changes materially, we will tell you in the app.