Privacy Policy

Last updated: May 3, 2026

1. Who is the controller

Vaults.lol is the data controller for personal data processed through this service. You can reach us through the contact form on any Vaults profile.

2. What we collect

Account data: a username and password hash. We do not collect or store email addresses, phone numbers, or any other contact details for accounts.
Profile content: anything you choose to publish on your Vault, including links, images, audio, and text.
Usage analytics: anonymised page views and link clicks on your profile, plus rough device type. We do not use third party tracking cookies on profiles.
Payment data: card payments are processed by Stripe. We only receive the transaction status linked to your username, never your card details.

3. Why we use it (legal bases under GDPR)

To provide and operate the service, performance of contract.
To process payments and fight fraud, performance of contract and legitimate interest.
To improve and secure the service, legitimate interest.
To comply with legal obligations such as tax and accounting, legal obligation.

4. Sharing

We share data only with the processors required to run Vaults: our hosting and database provider and our payments provider. We do not sell your personal data. Public profile content is, by design, public.

5. International transfers

Where data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

6. Retention

Account and profile data is kept while your account is active. After deletion we remove or anonymise data within 30 days, except where we must keep it longer to meet a legal obligation (for example, invoices for tax purposes).

7. Your rights

Under GDPR you can request access, correction, deletion, restriction, portability, and objection regarding your personal data. You can also lodge a complaint with your local data protection authority. Contact us through any Vaults profile to exercise these rights.

8. Cookies

We use a small number of strictly necessary cookies to keep you signed in. We do not use advertising or cross site tracking cookies.

9. Changes

We will update this page when our practices change and update the "Last updated" date at the top.