Privacy Policy

1. Controller

The controller responsible for data processing on this website is the operator of PlayVibe ("we"). You can reach us at support@conversionlab.biz.

2. Visiting the website

When you open a page, our hosting and CDN providers process technical data that your browser sends automatically: IP address, date and time, requested URL, referrer, browser and operating system. This is necessary to deliver the site securely and to defend against attacks.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Server logs are kept only as long as necessary for this purpose and no longer than required by law.

3. Quiz and games

The quiz result is calculated in your browser. Your answers are only sent to us if you subscribe; they are then stored together with your subscription so that we can send you your full result and content that matches your play style.

Game points and best scores are stored only on your device (local storage). They are not transmitted to us, have no monetary value and can be deleted by clearing your browser data.

4. Email subscription (double opt-in)

If you subscribe, we process: your email address; your confirmations and consents (age 18+, receiving results, games and quizzes by email, and — only if you tick the separate optional box — partner offers); the version of the form text you agreed to; where the form was submitted (quiz, game, blog or home page); language; IP address; browser user agent; time stamps; campaign parameters of your first visit (utm_source, utm_medium, utm_campaign, utm_content, utm_term, fbclid); your quiz answers and play style; and the status of your cookie choice.

We first send you a confirmation email. Your subscription only becomes active after you click the confirmation link (double opt-in). If you do not confirm, we send one reminder after 24 hours.

Legal basis: your consent, Art. 6(1)(a) GDPR. We store proof of every consent action (given, confirmed, withdrawn) to be able to demonstrate consent (Art. 7(1) GDPR); legal basis for these records: Art. 6(1)(c) and (f) GDPR.

The play style derived from your answers is used only to choose the content of our emails. It does not produce legal or similarly significant effects (no automated decision within the meaning of Art. 22 GDPR).

5. Partner offers (optional)

Partner offers are only sent if you gave the separate, optional consent in the form. The box is never pre-ticked and declining it has no effect on your quiz result or our other emails. We send these offers ourselves; we do not sell or hand over your email address to partners.

You can withdraw this consent at any time via the preferences link in every email, without affecting your other subscription.

6. Own statistics

To understand how the site is used (for example how many visitors start and complete the quiz per ad campaign), we record page views and events such as quiz start, quiz completion, form submission and game start in our own database. These records contain a random pseudonymous visitor ID (cookie pv_vid), the page, language and campaign parameters. No data is shared with third parties for this purpose.

Legal basis: Art. 6(1)(f) GDPR; storage of the visitor ID on your device: § 25(2) TDDDG / Art. 5(3) ePrivacy Directive. We keep these records for as long as necessary for the purpose described and no longer than required by law.

7. Meta Pixel and Conversions API (only with consent)

Only if you click "Accept" in the cookie banner do we load the Meta Pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. It sets the cookies _fbp and _fbc and sends page views and events (quiz start, quiz completion, form submission, game start) to Meta so we can measure and optimise our ads. If you click "Decline", the Pixel is not loaded at all.

If you accepted marketing cookies and confirm your subscription, our server also sends a confirmation event to Meta (Conversions API) containing a hashed (SHA-256) email address, the cookie identifiers fbp/fbc and an event ID. If you declined, we do not send this event.

Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG / Art. 5(3) ePrivacy Directive. For the collection and transmission we are joint controllers with Meta (Art. 26 GDPR, Meta Controller Addendum). Meta may process data in the USA. You can withdraw your consent at any time via "Cookie settings" in the footer.

8. Bot protection

Our subscription form uses Cloudflare Turnstile (Cloudflare, Inc.) and a hidden honeypot field to block automated sign-ups. Turnstile processes technical browser data and your IP address. Legal basis: Art. 6(1)(f) GDPR (protection against abuse).

9. Recipients and processors

We use the following service providers, bound by data processing agreements (Art. 28 GDPR):

• Customer.io (Peaberry Software, Inc.; EU data centre) — sending of confirmation and newsletter emails, subscription management.
• Cloudflare, Inc. — DNS, content delivery network, security and Turnstile bot protection.
• Meta Platforms Ireland Ltd. — Pixel and Conversions API, only with your consent (joint controllership, see section 7).
• A hosting provider in the EU — hosting of the website and API.
• A database provider in the EU — storage of subscriptions, consent records and statistics.

10. Transfers outside the EU/EEA

Some providers are part of groups based in the USA (Customer.io, Cloudflare, Meta). Where data is transferred to a third country, this is based on the EU–US Data Privacy Framework adequacy decision (for certified companies) and/or EU Standard Contractual Clauses.

11. Retention

• Unconfirmed sign-ups are deleted from our email service provider after 7 days.
• Consent records (including withdrawals) are kept as proof for as long as we may need to demonstrate your consent and no longer than required by law, even if you never confirmed or later unsubscribed.
• Confirmed subscriptions are kept until you unsubscribe. After unsubscribing your email address is kept on a suppression list only to make sure you receive no further emails.
• Own statistics and server logs are kept for as long as necessary for the purposes described above and no longer than required by law.

12. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR) — via the link in every email, on the preferences page or via "Cookie settings".

To exercise your rights, write to support@conversionlab.biz. You also have the right to lodge a complaint with a data protection supervisory authority, in particular with the supervisory authority in your country of residence. In the UK: Information Commissioner's Office (ICO).

13. Age

PlayVibe is intended exclusively for adults aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has subscribed, please contact us and we will delete the data.

14. Changes

We update this policy when our processing changes. The version and date are shown at the top. Previous versions are available on request.