Privacy Policy

RecoVibes is a network where websites, apps and games recommend each other. This policy explains what we collect, why, how long we keep it, and the choices you have. It covers two groups of people: publishers, who sign up and add the RecoVibes widget to their product, and visitors, who see the widget in someone else's website, app or game.

RecoVibes is operated by ZeroFour Ltd, Israel ("we", "us"). For anything about your data, use our contact page or write to info@zerofour.app.

The short version

• The widget sets no cookies, stores nothing on the visitor's device and uses no advertising IDs.
• We never store a visitor's IP address. We keep only a scrambled version whose key we delete after two days.
• We don't sell personal data or use it for advertising.
• Detailed view and click records are deleted after 13 months.

Visitors: what the widget records

When the widget shows on a page or screen, and when a recommendation is seen or tapped, we record:

• what happened (the widget loaded, a card was seen for at least a second, a card was tapped) and when, and, after a tap, whether the visitor reached that site and stayed on it for 15 seconds or went on to another of its pages;
• which website or app showed the widget, and which recommendation it was about;
• the domain of the page, and of the page that linked to it; a one-way fingerprint of the page path (not the path itself);
• browser and its major version, operating system, and device type (phone, tablet or computer);
• the country, worked out from the IP address at the moment of the visit, and the preferred language your browser or device sends;
• technical details of the widget, such as its version and how many cards it showed;
• a random, one-time ID for each tap, used to confirm the visit arrived.

IP addresses. We use the IP address briefly, in memory, to stop abuse: to limit how fast requests can come in and to tell real visits from fake ones. What we store is only a scrambled form of it, made with a key that changes every day and is deleted after two days - after that, the stored value can no longer be connected to an address.

We don't use this information to identify individual visitors, follow them across websites, or build profiles. Publishers see only totals - for example, how many views their recommendations got per country or browser.

Publishers: what we collect about you

• Your account. You sign in with Google. We receive and keep your email address, your Google account ID and the address of your profile picture. We don't receive your Google password.
• Your products. What you enter about your websites, apps and games: names, descriptions, links, store listings, categories, languages, design and filter settings.
• Your own visits. When you use the dashboard, we note your IP address in server memory for up to seven days, so visits to your own products from that address don't earn points. It isn't written to our databases.
• Our website. recovibes.com uses Vercel Web Analytics, which counts page views without cookies and without identifying you.
• Messages to us. If you use the contact page or flag a product, we keep what you wrote and the email you gave, so we can answer you. For flagged products we also keep your browser's name and version.
• Waitlist. If you joined the waitlist, we keep the email you signed up with so we can tell you when RecoVibes opens.

Why we use it

• to run the network: choose recommendations, show them, and count views and taps;
• to award and spend points fairly, and to detect fake views and clicks;
• to give publishers statistics about their own products;
• to run your account, verify that you own the products you add, and contact you about the service.

Where the European GDPR applies, we rely on performing our agreement with you (for publisher accounts) and on our legitimate interests in running a working, fraud-free network and measuring it (for widget records).

Who we share it with

We don't sell personal data. We use these service providers to run RecoVibes:

• Google, for sign-in;
• DigitalOcean, which hosts our servers and the view-and-click database in Frankfurt, Germany;
• MongoDB Atlas, which stores account and product data (currently in South Africa);
• Vercel, which hosts recovibes.com and its page-view analytics;
• Cloudflare, which carries traffic to our servers.

To verify that you own an app, we read its public store page (for example on the App Store, Google Play or Steam). We may disclose information if the law requires it, or to protect the service and its users from fraud or abuse.

How long we keep it

• view and click records: 13 months, then deleted automatically;
• the daily keys that scramble IP addresses: two days;
• your account and products: until you delete them or ask us to;
• waitlist emails: until we open, or until you ask us to remove yours.

Your choices and rights

You can ask to see the personal data we hold about you, correct it, delete it, or object to how we use it - use our contact page or write to info@zerofour.app, and we'll answer within 30 days. Publishers can delete their products from the dashboard at any time. You can also complain to your data protection authority - in Israel, the Privacy Protection Authority.

Because the widget doesn't identify visitors, we usually can't link a specific view to a specific person. If you'd rather not see the widget, standard content blockers can hide it.

Publishers: telling your visitors

If you show the RecoVibes widget, your own privacy policy should mention that your site, app or game shows recommendations from RecoVibes and that RecoVibes records views and taps as described here. You can link to this page.

Children

Publisher accounts are for adults. The widget may appear in products used by children; it doesn't set cookies or identify visitors, and it isn't used for advertising profiles.

Changes

If we change this policy, we'll update the date above, and tell publishers by email about significant changes. See also our Terms of Use.