Privacy Policy

The short version

OpenVibe.Network collects what it needs to work and to keep abuse out, and no more. We do not sell or rent personal information, we do not share it for advertising, and we do not run advertising trackers. Most of OpenVibe.Network works without an account.

What we collect

• Request logs. Like every web server, ours record your IP address, browser type, the address requested and the time. We use them for security, rate limiting, debugging and aggregate traffic statistics.
• Usage statistics. First-party page views with a random session identifier, kept on our own servers, so we can see which parts of the network are used.
• An anonymous page count. The shared navigation bar reports one count per page load containing only the site's hostname and the day. No user, IP address or page is stored with it. It decides the order of sites in our menus. It is skipped when your browser sends Global Privacy Control or Do Not Track.
• Account information, if you sign in. Your OpenVibe account is held by openvibe.network. See the next section.
• Your account. Username, email address, a salted hash of your password, profile and avatar, theme, display and notification preferences, push-notification subscriptions for devices where you switched them on, linked services and the basic profile they share, sign-in sessions, wallet balances and transactions, and your cross-site history while it is switched on.

Why we use it

• To provide the service you asked for and keep you signed in (performance of our agreement with you).
• To keep the service secure, prevent abuse and understand usage in aggregate (our legitimate interests).
• To send account email such as verification and password resets, and notifications you switched on (agreement and consent).
• To comply with the law.

Cookies and storage in your browser

We use a small number of first-party cookies: a sign-in token (ov_token), a refresh token limited to the sign-in paths, a short-lived state cookie during sign-in, and a hint (ov_sso_hint) that remembers whether you were signed in. openvibe.network also keeps a sign-in cookie that lets other OpenVibe sites check, in a hidden frame or through your browser's built-in federated sign-in, whether to sign you in quietly. It is never used for anything except that check.

Your theme, display settings (text size, reduced motion), recent pages, a cached copy of the navigation and similar conveniences are kept in your browser's local storage. There are no third-party advertising or social cookies. Our sites sit behind Cloudflare, which may set its own security cookies and measure performance.

Across OpenVibe sites

OpenVibe sites share one account. When you are signed in, the site you visit learns who you are from openvibe.network. While cross-site history is switched on, the pages and tools you open while signed in are listed for you, and only you, at openvibe.network/history, where you can clear the list or pause it.

Who we share with

Only the services needed to run the network: hosting (OVH, servers in the United States), network security and delivery (Cloudflare), object storage for media (Backblaze B2 or Cloudflare R2), and email delivery for account messages. They process data on our instructions. We disclose information when the law requires it, and we tell the person affected when we are allowed to. If OpenVibe is ever reorganised or handed to new maintainers, the data moves under the same promises.

How long we keep things

• Request logs and raw usage events: a limited rolling period, then totals only.
• The anonymous page count: totals per site and day, nothing personal to delete.
• Account data: until you delete your account. Backups expire on their own shortly afterwards. Records we must keep by law, such as payment records, are kept for the required period.

Where your data is

Our servers are in the United States. If you use OpenVibe from elsewhere, your information is transferred to and processed in the United States, which may have different data protection rules from your country.

Security

Traffic is encrypted in transit. Passwords are stored as salted hashes, sign-in tokens are signed and short-lived, and internal service routes are not reachable from the internet. No system is perfectly secure; if a breach affects your personal information we will tell you and the relevant authorities as the law requires.

Your choices and rights

You can use most of OpenVibe.Network without an account, block cookies, and switch on Global Privacy Control to skip the anonymous page count. With an account you can view, correct, export and delete your data from your account settings, or ask us to do it.

Depending on where you live, including the EEA, the UK and US states such as California, you may have rights to access, correct, delete, restrict or object to the use of your data, to data portability, and to complain to your data protection authority. We do not sell or share personal information as those laws define it, and we do not make automated decisions with legal effect. Write to [email protected]; we answer within 30 days and will not treat you differently for asking.

Children

OpenVibe.Network is not for children under 13, and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.

Changes and contact

We will post changes here and update the date above; significant changes are announced on the site. Questions and requests: [email protected].