Last updated: 12 June 2026
1. Data controller
The data controller for https://www.vibemelon.pl is the individual developer operating the VibeMelon project, based in Poland ("we", "us"). This website and related services are not operated as a registered company; we process data as a private operator of this project.
For any matter relating to personal data and this privacy policy, contact us at: melkub12@gmail.com.
2. What data we collect
2.1 Contact form
If you send a message, we store your name, email address, message content, and preferred language so we can reply. We do not use this data for marketing newsletters.
2.2 App downloads
When you download an installer, we record an event in our database: which app was downloaded, platform (e.g. Windows), timestamp, browser user-agent string, and an ISO country code (e.g. PL, DE) derived from your IP address using an offline lookup at the moment of download. We do not store your full IP address in our database. The same download may also be logged as an anonymous aggregate event in our self-hosted Umami analytics (app name, platform, country code) for internal statistics and the admin dashboard. This powers public download counters and internal reporting. We do not link downloads to your name or email unless you also contact us separately.
2.3 Analytics (optional)
If you accept optional analytics cookies, we load Umami Analytics (self-hosted on our infrastructure) to collect anonymous page views: path, referrer, device/browser aggregates, and country derived from your IP without storing the full address. Umami is not used for advertising profiles or cross-site tracking. You can withdraw consent at any time via Cookie settings in the site footer; after withdrawal we stop loading the analytics script on subsequent visits.
2.4 Technical logs
Our hosting provider (Hetzner, EU) may process server logs, including IP address, request URL, and user-agent, for security and troubleshooting. Rate limiting on downloads and contact submissions uses your IP address briefly in server memory.
3. Cookies
| Name | Purpose | Duration |
|---|---|---|
| vm_cookie_consent | Stores your cookie choices | 12 months |
| NEXT_LOCALE | Remembers your language preference | 12 months |
| umami.* (analytics) | Anonymous visit statistics via our self-hosted Umami instance — only if you enable analytics cookies. No ad tracking. | Per Umami configuration (typically up to 24 months) |
4. Legal bases (GDPR)
- Necessary cookies & site operation — Art. 6(1)(f) GDPR (legitimate interest) and/or technical necessity to provide the service.
- Analytics — Art. 6(1)(a) GDPR (your consent; you may withdraw it at any time).
- Contact messages — Art. 6(1)(b) GDPR (steps at your request) and/or Art. 6(1)(f) GDPR (legitimate interest in responding).
- Download statistics — Art. 6(1)(f) GDPR (legitimate interest in measuring product usage and maintaining the service).
- Server logs & rate limiting — Art. 6(1)(f) GDPR (legitimate interest in ensuring website security, preventing abuse, and protecting against attacks).
5. Retention
- Contact messages: until handled, then archived or deleted when no longer needed.
- Download events: kept for statistical purposes; aggregated counts may remain longer.
- Analytics: per Umami retention settings on our self-hosted instance.
- Cookie consent record: 12 months, then we ask again.
- Server logs: according to the hosting provider's retention policy.
6. Processors & hosting
Data is stored on infrastructure we control (self-hosted Supabase and web hosting on Hetzner, EU). Optional analytics runs on our own Umami instance. We do not sell personal data.
7. Your rights
Under GDPR you may request access, correction, deletion, restriction, or portability of your personal data, and object to certain processing. You may lodge a complaint with the Polish supervisory authority (UODO, uodo.gov.pl). To exercise your rights, email melkub12@gmail.com.
8. Changes
We may update this policy. The "Last updated" date at the top will change when we do.