Privacy policy

For this website and the app VIBE – Party Games. Last updated: November 2026

1. Controller

Matthias Dellinger, Thias Lab – address see legal notice.
Email: info@thiaslab.de

2. This website

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit, the server processes technically necessary data such as your IP address, the requested page and details about your browser and operating system – solely to deliver the page to you (Art. 6(1)(f) GDPR). We have switched off access logs: we do not store this data. We have a data processing agreement with ALL-INKL.

The website loads no external fonts, maps or videos and uses no analytics or tracking services. It sets no cookies – with one exception: the “AI promo videos” guide (see below).

Ads on the guide (Google AdSense)

On the page thiaslab.de/anleitung-ki-werbevideos we show ads via Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Ad spaces are labelled “Anzeige” (ad). There are no ads on any other page.

On your first visit to the guide, a consent dialog from Google asks what Google and its advertising partners may use your data for. This mainly involves your IP address, details about your browser and device, the page visited and which ads you see and click; cookies or similar identifiers may be stored and read on your device.

• With your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), Google may tailor ads to your interests and measure their performance.
• Without consent, Google only shows non-personalised or limited ads. Only the data needed to deliver the ad and prevent fraud is processed (Art. 6(1)(f) GDPR – our interest in offering the guide for free).

You can change or withdraw your choice at any time via the “Cookie-Einstellungen” (cookie settings) link at the bottom of the guide. Google may also process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework, and transfers are based on the European Commission’s adequacy decision (Art. 45 GDPR). See Google’s privacy policy and How Google uses data from partner sites.

3. Contact by email

If you write to us, we process your email address and the content of your message in order to reply (Art. 6(1)(b) or (f) GDPR). Our mailboxes are also hosted by ALL-INKL in Germany. On receipt, our mailbox sends an automatic confirmation. We delete requests once they are resolved, unless statutory retention obligations apply.

4. The app “VIBE – Party Games”

VIBE is intended for people aged 16 and over; younger players need their parents’ consent.

Your account (VIBE ID)

To use online rooms, friends and the shop, you create an account. We store:

• your username and email address
• your password – only as an irreversible hash, never in plain text
• if you sign in with Apple or Google: the identifier of your Apple or Google account and the email address Apple or Google passes on (with Apple optionally an anonymous relay address); for Apple also a token we use to revoke the Apple sign-in when you delete your account
• your avatar or own profile photo and your character with outfits and profile frames
• your VIBE ID, the date you signed up and the date of your last name change
• your progress: XP, level, rounds played, missions, crowns, best scores, gems, unlocked items and premium status
• a sign-in token so you stay signed in (stored on the server only as a hash)

We process this to provide your account and the online features (Art. 6(1)(b) GDPR). Other players see your username, avatar, character, level and crowns – nobody sees your email address.

If you forget your password or change your email address, we email you a code (from noreply@thiaslab.de). It is valid for 15 minutes.

Friends, chat and rooms

We store your friends list, pending friend requests and whom you have blocked. Your friends can see whether you are online.

• Friend chat: the last 15 messages per friend, including voice messages of up to 10 seconds.
• World chat: messages are visible to everyone; we keep the last 100 per region.
• Room chat: only kept while the room exists.

Rooms, invites and game messages are only relayed while a room exists – the game itself runs on the device of the person who created the room. Room passwords are stored only as a hash. We also record aggregated usage figures, such as how often a game is started, without any link to individual people.

Voice chat and reports

In voice chat, your voice is relayed live to the other players in the room. The server keeps only the last 3 minutes in memory so that a report can be reviewed. If someone reports a player, we store these minutes (also separated by speaker) and the chat of the last minutes with the report and send them to our support mailbox. We keep reports, bans and a log of important account events (at most 300 entries per account) to prevent abuse (Art. 6(1)(f) GDPR). Audio recordings are kept only for the latest 50 reports.

Notifications

If you allow notifications, we store your device’s notification token. We use it to notify you when the app is closed – for example about invites, friend requests and messages. Notifications are delivered via Apple’s push service (on Android, Google’s). You can turn them off at any time in your system settings.

Purchases: VIBE Premium and gems

VIBE is free to play. If you like, you can buy in the app:

• VIBE Premium as a monthly subscription or once as Lifetime: no ads, extended categories, words and game modes, premium missions with extra XP, a premium star and a shimmering avatar.
• Gems, the in-game currency for outfits, hairstyles, glasses, hats and profile frames in the shop. You also earn gems by playing.

Payment is handled exclusively by Apple’s App Store or Google Play. We never see your payment details – such as card, account or billing address; Apple or Google are responsible for the payment and their privacy policies apply (Apple, Google).

To credit a purchase to your account, we process the transaction number, the product purchased, purchase and expiry dates as well as cancellations and refunds. Our service verifies App Store purchases directly with Apple and Google Play purchases directly with Google; Apple informs us about App Store renewals, cancellations and refunds. So that Apple or Google can match the purchase to your account, the app passes on a pseudonymous identifier of your account – not your name and not your email address. The legal basis is the performance of the purchase (Art. 6(1)(b) GDPR). We keep purchase data as long as your account exists. “Restore purchases” in the app reassigns earlier purchases to your account; you cancel a subscription in your Apple or Google account settings.

Advertising (Google AdMob)

In the free version, VIBE shows an occasional ad between rounds – never mid-game – and, if you tap for it yourself, video ads that earn you bonus XP. With VIBE Premium you see no ads. The ads are delivered by Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

On first launch, the app asks you in a consent dialog provided by Google what Google and its advertising partners may use your data for. This mainly involves your device’s advertising ID, your IP address, details about your device, operating system and app, and which ads you see and tap. Information may be stored on and read from your device for this purpose.

• With your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), Google may tailor ads to your interests and measure their performance.
• Without consent, Google only shows non-personalised or limited ads. Only the data needed to deliver the ad and prevent fraud is processed (Art. 6(1)(f) GDPR – our interest in offering the app for free).

You can change or withdraw your choice at any time in the app under Einstellungen › Werbe-Einwilligung (Settings › Ad consent).

iPhone and iPad: iOS additionally asks, via Apple’s App Tracking Transparency prompt, whether VIBE may use your advertising identifier (IDFA). If you decline, Google does not receive it. You can change this under Settings › Privacy & Security › Tracking. Android: you can reset or delete your advertising ID under Settings › Google › All services › Ads.

Google may also process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework; transfers are based on the European Commission’s adequacy decision (Art. 45 GDPR). See Google’s privacy policy and how Google uses information from apps that use its services.

We only receive aggregated figures from Google, such as how many ads were shown – no data about individual people. For bonus XP, our service records on your account how many rewards you have received today (at most three per day). While you watch an ad in a room, the others there see a note that you are watching an ad.

Beyond that, we use no analytics or tracking tools and sell no data. Apart from Google and Apple (as described here), we only share your data with the service providers named here who process it on our behalf.

Where the data is stored

The VIBE online service runs on Fly.io, Inc. (USA), on servers in Frankfurt am Main, Germany. Fly.io processes the data on our behalf. Where access from the USA is possible, transfers are based on the EU Standard Contractual Clauses in Fly.io’s data processing agreement (Art. 46 GDPR). The connection between the app and the service is encrypted. Emails – such as codes and reports – are sent via ALL-INKL in Germany.

Other services: Apple (Sign in with Apple, App Store purchases, notifications on iPhone and iPad) and Google (Sign in with Google, ads via AdMob, purchases and notifications on Android). They only receive the data the respective service requires.

On your device

The app stores your sign-in token, settings and favourites locally on your device. It uses the camera only when you take a profile photo, the microphone only when you speak in voice chat or record a voice message, and shows notifications only if you allow it. You can change all of this at any time in your system settings.

Feedback from the app

When you tap “Feedback” in the app, your email app opens with a prepared message to support@thiaslab.de. It contains your VIBE ID, username and app version so we can help you. You see the message before sending and can edit it.

Retention and deletion

We keep your account data until you delete your account – directly in the app under Einstellungen › Konto löschen (Settings › Delete account) or by email (see Delete account). We then delete your account with profile photo, character and unlocked items, your progress including gems and crowns, your purchase data, friendships, requests, friend chat and your world chat messages. If you signed in with Apple, we revoke that sign-in with Apple. Reports you made or that concern you are kept to prevent abuse.

Important: deleting your account does not cancel a running Premium subscription – you can only do that in your Apple or Google account settings.

5. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Just email info@thiaslab.de.

You may also lodge a complaint with a data protection supervisory authority, for example the one where you live.

6. Changes

If our apps or services change, we will update this policy. The version published here applies.