Privacy Policy

This page explains what VI World Vacation collects, why, and how you can control it. VI World Vacation is operated by an individual as an independent fan campaign, not a registered company.

What we collect

• Account info: your email and password (your password is hashed by our authentication provider, Supabase — we never see or store it in plain text). If you sign in with Google or Discord, we receive your email and basic profile info from them.
• Profile info you choose to give us: location, date of birth (used to confirm age requirements), phone number, and onboarding survey answers (years playing GTA, favorite game, etc.) — all optional except date of birth, which is required to confirm eligibility for age-gated features.
• Support/contribution info: if you send an optional $1.60 contribution, we store the payment method you chose, a reference code, and the transaction ID/confirmation text you submit. We never collect or store card numbers, bank account numbers, or Payoneer/Binance login credentials — payments are sent directly through Payoneer or Binance Pay, and this site only sees what you type into the confirmation form.
• Discord info: if you connect Discord for giveaway eligibility, we store your Discord user ID and username, and whether our system found you as a current member of the campaign's Discord server.
• Technical info: your IP address, used only to prevent abuse (rate-limiting repeated attempts on voting, payments, and login) — not used for tracking or advertising.
• Analytics: basic first-party event data (which buttons you click, which screens you view) stored in our own database. We do not use any third-party advertising or analytics trackers.

Why we collect it

To let you sign the petition once, verify age and giveaway eligibility, manually verify optional contributions, prevent fraud and abuse, and understand how the campaign is doing so we can improve it.

Who else sees it

• Supabase — hosts our database and handles authentication. They process data on our behalf under their own security and privacy practices.
• Cloudflare Turnstile — provides CAPTCHA protection on sign-up and password-reset forms; it may set its own cookie to do this.
• Discord — only if you choose to connect your account, solely to verify server membership for giveaway eligibility.

We do not sell your data, and we do not share it with advertisers.

Cookies

• A session cookie that keeps you signed in (required for the site to work).
• A referral cookie (viwv_ref), kept for 30 days, that credits whoever referred you if you sign up.
• Cloudflare Turnstile's own CAPTCHA cookie, when you interact with a protected form.

Marketing emails

At signup you can optionally check a box to receive campaign updates. This is never required. You can ask us to stop at any time by contacting us below.

How long we keep data

We keep your data while your account is active. You can request deletion at any time — contact us and we'll remove your account and associated personal data, except where we're required to keep records (for example, a record that a specific contribution was verified, kept in a form that no longer identifies you where possible).

Your rights

You can ask us to access, correct, or delete your personal data at any time by contacting us below.

Contact

Privacy questions or requests: commission@viworldvacation.com.