Ventriff
Privacy Policy
Last updated: June 2026
What we collect
- Your alias — whatever you type when you sign up. Shown on share-cards.
- Your country — auto-detected from your IP at first login. Used only for the Triffroom "My country" filter. Never displayed below country-level (no city).
- Your language preference — auto-detected from your browser. Used for the Triffroom "My language" filter.
- Your vents — what you write, plus the AI-generated variants and your chosen one.
- Authentication identifier — your Google account ID, stored by Supabase Auth. We never see your password.
- Recognition you give — when you click "I feel this" on someone else's vent, we record it (anonymously deduped via a session cookie if you're not signed in).
What we don't collect
- Your real name (even if Google provides it, we never store or display it)
- Your email address (Supabase Auth manages it for sign-in; we don't use it for marketing)
- Your phone number, address, or any contact details
- Tracking cookies, analytics fingerprints, or third-party trackers
- City-level location, GPS, or precise location data
Cookies
We use only essential cookies:
- Session — to keep you signed in.
- Anonymous token — to dedupe "I feel this" clicks before sign-in.
Payments
Credit purchases are processed by Stripe. We never see or store your card details — Stripe handles them directly. We only store how many credits you hold and a record of each purchase.
Your rights
From your Vault you can do it yourself, instantly: Export downloads your whole archive, the trash icon on any vent deletes it, and Delete account erases your account and every vent in it. For anything else, email hi@ventriff.com and we respond within 14 working days.
Who can see what
- Public — anyone can see vents in the Triffroom and on
/k/[slug]share-links, including the alias and country flag. - Private — your Vault. Only you can see it, and only when signed in.
Subprocessors
- Supabase (EU region) — database + authentication
- Anthropic — AI variant generation (your vent text is sent there each generation)
- Stripe — payment processing for credit purchases
- Vercel — hosting + edge CDN
- Resend — outgoing transactional mail (only for compliance notifications, never marketing)