Privacy and Cookie Policy

VibeTune528, operated by Yoni Yarom, is the controller of the information collected through the website and the services described in this policy. For privacy inquiries: office@vibetune528.co.il.

Essential information, not dependent on consent

• Contact details provided voluntarily, such as name, phone, email address, subject and message content.
• Hosting, security and server request records, processed by the hosting and security providers as an inherent part of running the website. These records may include IP address, device and browser type, request time and security identifiers. They are required for functioning, preventing misuse and documenting faults, and are therefore not conditional on consent to optional cookies.
• Cookie preferences and the time the choice was saved in the browser.

Optional mailing, only after explicit sign-up

• When signing up to receive a digital gift or email content, the email address, sign-up source, status and date of marketing consent, and a random identifier for unsubscribing are saved. Marketing content is sent only if explicit consent was given for it, and the sign-up can be removed at any time via the link in every message.

Optional measurement, only after consent

• Usage data via Google Analytics, such as traffic source, pages viewed, time on site and interactions on the site. Google's measurement code loads and transmits data only after explicit approval in the consent mechanism. If measurement is not approved, the code does not load; after consent is withdrawn, measurement is disabled and no further events are sent.

It's important to clarify: declining optional measurement does not mean no information is processed at all. The hosting and security records described above continue to exist, as they are required to run the site and keep it secure.

There is no need to provide medical, mental-health, financial or other sensitive information in the form. Such information, if provided at the sender's own initiative, will be used only to understand the initial inquiry.

In addition to saving the preference in the browser, the server also keeps an evidentiary record whenever a choice is made, an approval, rejection, update or withdrawal. The purpose of the record is to document which version of the notice was shown and what was chosen, to handle disputes and to preserve the integrity of the consent mechanism.

The record includes the date, type of action, cookie categories, document version and its hash, the page path without parameters, language, and hashed browser identifiers, IP address and user agent where available. The IP address, user-agent string and the local identifier are not stored in the record in their raw form. Events are linked to each other via hashing for sequence verification, and access to them is server-side only.

The information is used to respond to inquiries, arrange a call or service, run and secure the website, handle faults and reports, comply with legal obligations, and improve the service and user experience. Where separate consent was given, the information is also used to send marketing content and mailings by email until the sign-up is cancelled.

Full access to the site's administrative information is limited to Yoni Yarom. Elena Driga may be granted partial and limited access, restricted to the areas and information required for her role, subject to dedicated permission. Infrastructure providers may process information technically only to the extent required to operate the service.

Contact details and personal operational information are generally retained for up to 12 months from the date of collection or last activity, after which they are intended for deletion, minimization or anonymization, unless longer retention is required for a legal obligation, dispute, security or protection of rights.

Mailing subscriber details are retained for as long as the sign-up is active and are required to send the content. After unsubscribing, marketing mailings stop, and a minimized suppression record is kept to the extent required to honor the removal request and prevent re-registration without consent; the remaining information will be deleted or minimized in accordance with the obligations and needs detailed here.

An exception to this is the consent-evidence repository: cookie-choice records are minimized, hashed server records that cannot be edited in the ordinary way, and each record has a defined retention period of seven years. Consent events in contact forms, the digital gift and the Love Wall are also shown in the admin interface with a seven-year evidentiary retention period. The length of this period, its necessity and the method of deletion at its end are subject to periodic review and legal examination; nothing here determines that it is required in every case.

Earlier deletion may be requested subject to law, record integrity and the needs described above. A request will be assessed by the type of information rather than by a uniform rule.

The information is not sold. Depending on the component used, the following may be involved:

• Lovable — application hosting and infrastructure, including the gateway connecting to email services.
• Supabase — database, authentication and server-side services.
• Cloudflare Turnstile — automated-use detection and form security, as an essential component.
• Cloudinary — delivery of public image and video files.
• Google Fonts — font delivery, when the browser requests them from the provider.
• Google Analytics — optional measurement, only after explicit approval.
• Google Gmail / Google Workspace — sending digital gifts, mailings and operational correspondence.

Vendors may process information outside Israel in accordance with the arrangements applicable to the service. Free-text content from forms, card content or private links is not knowingly sent to the measurement tool. Opening a WhatsApp link is a user-initiated action that transfers the user to Meta/WhatsApp's service under its own terms and policy.

Advertising pixels, ad personalization or storage for advertising purposes are not currently activated on the site; the advertising categories in the consent mechanism remain declined. If such a tool is activated in the future, the policy and mechanism will be updated before activation and appropriate consent will be requested.

Separately from advertising cookies, the site offers an optional sign-up for email mailings. This consent is not pre-checked, is given only through an explicit action, and can be withdrawn at any time via the unsubscribe link in every message.

Subject to law, you may request to review, correct, update or delete your information, and to withdraw consent to processing based on consent. To protect the requester's privacy, we may ask for reasonable details to verify identity.

Reasonable organizational and technological measures are taken to reduce unauthorized access, misuse or exposure. However, no online system is completely immune to risks.

Essential cookies and storage are used for operation, security and saving preferences, and always run. Optional measurement via Google Analytics is activated only after explicit approval in the consent mechanism. If consent is declined the code does not load; after it is withdrawn, measurement is disabled and no further events are sent. The site remains fully usable even without measurement, and there is no blocking of content or services due to declining optional cookies.

Marketing cookies are not currently active on the site and are not part of the consent mechanism.

You can approve, decline or change your choice at any time. The choice is saved for up to 12 months, after which a new choice will be requested.

The Love Wall has separate information characteristics, including user content, consents, sharing links and moderation. For details, see the Love Wall privacy policy.

This policy may be updated in accordance with changes in the service or the law. A material change will be posted on the site. For questions or privacy requests, please contact office@vibetune528.co.il.