Effective date: October 5, 2026 Company: Vibralizer LLC (“Vibralizer,” “we,” “our,” “us”)
This Privacy Policy explains how Vibralizer handles information when you use:
- The Vibralizer application (the “App”)
- Our website (the “Site”)
- Our community channels (e.g., Discord)
- Optional activities such as email sign‑ups, surveys, or playtests.
What changed in this version: This version lists everything a crash report can include, says plainly that analytics are pseudonymous rather than anonymous, and explains what deleting your analytics in the App covers. Which analytics system your copy of the App uses depends on its version:
- App versions released before July 22, 2026 (Vibralizer 0.4.3 and earlier) send analytics via Unity Analytics, as described in section 1a below.
- App versions released on or after July 22, 2026 (Vibralizer 0.5.0 and later) send analytics only to Vibralizer’s own first‑party service, as described in section 1b below, and add a separate consent for crash reporting.
Quick summary (TL;DR)
What we don’t do
- We do not record, upload, transmit, or store any audio data, including content, waveforms, frequency data, or recordings. All audio visualization processing happens on‑device in real time.
- We do not transmit, store, or process media metadata (e.g., track title, artist, album) off your device. Media information obtained from the operating system’s audio API for display purposes stays entirely on‑device.
- We do not log which keys you press or what you type. Input telemetry (new versions only) is limited to counts of interactions per device type (keyboard vs. mouse vs. game controller), never their content.
- We do not store IP addresses in our own analytics database (Vibralizer 0.5.0 and later; 0.4.3 and earlier use Unity Analytics, which processes IP addresses as described below).
- We do not sell or share personal information for cross‑context behavioral advertising.
- We do not run targeted ads in the App.
- We do not have user accounts, profiles, or logins.
What we do
- App analytics: With your consent, we collect pseudonymous, product‑usage analytics to improve the App. Depending on your App version this goes to Unity Analytics (Vibralizer 0.4.3 and earlier) or to our own service at analytics.vibralizer.com (Vibralizer 0.5.0 and later). Either way it includes a technical "signal present" indicator (Yes/No) to help us debug issues, but never the audio itself. You can turn analytics off and delete previously sent analytics at any time in Settings → Legal.
- Crash reports: Crash and error reports go to our crash‑reporting provider, Backtrace, so we can fix problems. In Vibralizer 0.5.0 and later this only happens with your consent (Accept on the first‑run screen, or the Crash Reports toggle); in older versions it happens automatically. Reports carry a random Crash Reports ID instead of your name and can include your Vibralizer save files and the App’s log; versions before 0.6.0 also sent your Steam ID and your computer’s name. Section 2 lists everything.
- Site: We use privacy-preserving, cookie-less analytics to measure website performance.
- Email: Our email list is voluntary; you can unsubscribe at any time.
Scope & Definitions
- Personal Information / Personal Data (“PI”): Information that identifies or can reasonably be linked to a person or household.
- De‑identified data: Information that cannot reasonably be used to identify a person or household. We maintain and use de‑identified data subject to controls that prevent re‑identification.
- Controller / Business: Vibralizer LLC (we decide why/how data is processed).
- Processor / Service Provider: Vendors that process data for us under contract (e.g., Unity, DreamHost, Cloudflare, Sauce Labs).
Audio & Media Handling (Important)
Vibralizer uses the microphone (or system audio) to drive visuals in real time. We are strictly transparent about what leaves the device:
- On-Device Processing: The analysis of frequencies and waveforms to generate visuals occurs entirely on your device.
- No Audio Data Transmitted: No audio data, including recordings, waveforms, frequency data or volume levels, is ever transmitted off your device.
- Media Metadata (On‑Device Only): The App may retrieve media metadata (e.g., track title, artist, album, playback state) from the operating system’s audio API to display playback information and controls within the App. This metadata is used solely for on‑screen display, is never transmitted off your device, and is not included in analytics or shared with Vibralizer or any third party. If you use the App’s on‑screen playback buttons (play/pause, next, previous, seek), analytics record only which button was used and whether something was playing, never what was playing. Your use of third‑party media applications (e.g., Spotify, Tidal, web browsers) remains governed by those platforms' own privacy policies.
- Audio Device Names: Analytics record the names of your audio devices when you switch between them, and crash reports include the name of the device in use, exactly as your operating system lists them.
Information We Collect
1) App Analytics (Optional; Consent‑based; Pseudonymous)
The analytics system depends on your App version, shown in the App’s menu. Both are consent‑based and controlled from Settings → Legal (older versions: Settings).
1a) Vibralizer 0.4.3 and earlier - Unity Analytics
These versions send pseudonymous product‑usage telemetry via Unity Analytics (a Unity Technologies service). Examples include: crash and performance diagnostics, App screens opened, settings toggles, feature usage, and device characteristics relevant to rendering performance (e.g., GPU model, OS version).
- Unity Analytics default data elements: IP address (network routing/security), a unique installation‑specific ID (pseudonymous analytics identifier), User ID (defaults to the installation ID), and IDFV (on Apple platforms).
- Retention: Unity retains this data no longer than 13 months, then deletes it.
- Controls: The in‑App analytics toggle stops collection; the in‑App deletion control forwards a deletion request to Unity. You may also contact Unity at DPO@unity3d.com or review Unity’s policy at unity.com/legal/game-player-and-app-user-privacy-policy.
1b) Vibralizer 0.5.0 and later - Vibralizer first‑party analytics
These versions (Vibralizer 0.5.0 and later) send pseudonymous product‑usage telemetry only to our own analytics service (analytics.vibralizer.com), operated by Vibralizer LLC on hosting infrastructure provided by DreamHost in the United States. No third‑party analytics network receives this data, and nothing is collected or transmitted until you make a choice on the first‑run consent screen. Examples of what we collect:
- Identifiers: A randomly generated installation ID (a pseudonymous number that is not derived from your name, email, or hardware serial numbers) and a per‑launch session ID. Deleting your analytics in the App gives the App a new installation ID.
- App and device context: App version and build channel (e.g., demo vs. full release), operating system, and device characteristics relevant to rendering performance (e.g., GPU model, CPU, memory, screen resolution and refresh rate), battery level and screen brightness, and whether the optional Pro upgrade is active.
- Feature usage: Which visual scenes (“Vibes”) are viewed and for how long, frame‑rate performance while viewing them, settings changes (including audio device names when you switch devices), customization actions (color palettes, playback speed, visual effects/filters), use of the on‑screen media playback buttons (the button pressed, never the media), and first‑run setup steps (e.g., how long the macOS system‑audio permission screen was shown).
- Input method: Counts of interactions per input device type (keyboard, mouse, game controller) so we know which control schemes to prioritize. We never record which keys were pressed or any text.
- Audio signal indicator: A technical "signal present" (Yes/No) state, sent along with other events, to debug capture issues. Never the audio itself.
- What’s NOT collected: We do not ask for your name or email, and analytics do not include precise geolocation, audio, media metadata (e.g., track titles, artist names), typed text, or which keys you press. One caveat: an audio device named after you (for example “Alex’s Headphones”) appears in analytics under that name.
- IP addresses: Our analytics service does not store IP addresses. Your IP address is necessarily visible in transit to deliver the data (and may appear briefly in our hosting provider’s standard web‑server security logs, which are retained for a limited period), but it is never written to the analytics database or linked to your analytics records.
- Controls: In the App, go to Settings → Legal to (a) turn analytics on/off (changes apply immediately), (b) delete previously sent analytics from our servers, and (c) view your analytics ID.
2) Crash & Error Reporting (Backtrace)
To keep the App stable, crash and error reports can be sent to Backtrace (a Sauce Labs service).
- Vibralizer 0.5.0 and later: Crash reporting is consent‑based. You are asked at first run, and a separate Crash Reports toggle in Settings → Legal lets you change your choice at any time; nothing is sent before or against your choice.
- Vibralizer 0.4.3 and earlier: Crash reports are sent automatically when the App crashes, on the basis of our legitimate interest in fixing defects. To object or request deletion, contact privacy@vibralizer.com.
- What a report can contain: the error message and stack trace; a trail of recent App actions and log messages, and the App’s log for the session; app and Unity versions, store channel, and the Vibe or screen in use; operating system, CPU, GPU, memory, system language and battery state; the name and sample rate of the audio device in use; your Crash Reports ID, a random ID shown in Settings → Legal; and copies of your Vibralizer save files (settings, Vibe customizations, and the file holding your analytics ID and consent choices). When the App crashes on Windows, the report also includes a small snapshot of what the App was doing at that moment; on macOS, the system’s crash log. Reports from versions before 0.6.0 also included your Steam ID (Steam versions), your computer’s name, a device identifier derived from your hardware, the folder paths of the App’s install and temporary files, and a screenshot of the App.
- File paths: Crash reports and the logs they include can contain file paths on your computer, which may include your account name.
- When reports are sent: when the App crashes, stops responding for 5 seconds or more, or logs an error, including errors it recovers from. A report that can’t be sent right away waits on your device and is retried, and a crash that closes the App is sent at the next launch.
- Network data: Backtrace receives your IP address as a technical consequence of transmitting the report.
- Deletion: Deleting your analytics in the App does not delete crash reports. To ask us to delete them, email privacy@vibralizer.com with your Crash Reports ID, shown in Settings → Legal. Reports from versions before 0.6.0 do not carry that ID, so for those include your Steam ID (Steam versions) or your computer’s name.
3) Website Interactions (Logs & Metrics)
When you visit the Site, our hosting and security providers process standard technical data (such as IP address, browser type, and pages requested) in server logs for security and operations, retained for a limited period.
- Site Analytics: We use Cloudflare Web Analytics to monitor the performance and health of our Site. This service does not use cookies or local storage to track you across websites. It relies on non-identifiable metrics (e.g., page load times, browser type, coarse region).
- Cookies: We use essential cookies only if strictly necessary for Site operation and security. We do not use marketing or advertising cookies.
4) Email List (Voluntary)
If you subscribe, we process your email address (and any name you provide) to send updates, via our email delivery provider (MailerLite). You can unsubscribe anytime via the link in each email.
5) Surveys & Playtests (Occasional; Optional)
- Surveys: If we run a survey, we will describe what we collect and why at the point of collection, seek consent where required, and delete or de‑identify responses after analysis.
- Playtests: Invite‑only pre‑release builds collect the same consent‑based analytics and crash reports described in sections 1b and 2, plus any feedback you choose to give us. We delete or de‑identify playtest logs after the test period unless needed to investigate critical issues or comply with law.
6) Community Channels (e.g., Discord) & Store Purchases
- Community: Your use of platforms like Discord is governed by their privacy policies. We may see your public handle and messages you send us for moderation and support.
- Store Purchases (itch.io / Steam): Purchases are handled by the store platforms. We do not receive your full payment details. We may receive limited transaction metadata (e.g., license confirmation, SKU, region, date).
- Steam: The Steam version of the App asks the Steam client whether you own the optional Pro upgrade, which Valve handles under its own privacy policy. Crash reports from versions before 0.6.0 also included your Steam ID (section 2).
How We Use Information
- Provide, secure, and improve the App and Site (e.g., performance tuning, debugging, deciding which features and platforms to prioritize).
- Communicate with you (support, updates, newsletters if you subscribed).
- Prevent fraud and protect the safety, integrity, and security of the App.
- Comply with law and enforce terms.
Data Sharing & Processors
We use service providers to help us operate the App/Site. We require these processors to protect data and use it only for our specified purposes.
- App Analytics (Vibralizer 0.4.3 and earlier): Unity Analytics (Processor).
- App Analytics (Vibralizer 0.5.0 and later): Collected first‑party by Vibralizer LLC; stored on hosting infrastructure operated by DreamHost (Processor) and mirrored to systems controlled by Vibralizer.
- Crash Reporting: Backtrace by Sauce Labs (Processor).
- Site Analytics & Security: Cloudflare (Processor).
- Site Hosting: DreamHost (Processor).
- Email: MailerLite (Processor), if you subscribe.
International Transfers
We process and store data in the United States (including our analytics database, hosted with DreamHost in the U.S.) and may allow processors to process data in other countries. When transferring personal data from the EEA/UK to regions without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) or comparable safeguards.
Retention
- App Analytics (both systems): Raw analytics events are retained no longer than 13 months from collection, then deleted (Unity enforces this for Unity Analytics; we enforce it with automated deletion for our first‑party service). You can delete your analytics sooner at any time in Settings → Legal.
- Crash Reports: Deleted automatically 12 months after they are received.
- Email List: Retained until you unsubscribe.
- Support Communications: Retained as needed to resolve issues and maintain records.
Your Choices & Privacy Rights
In the App
Settings → Legal (older versions: Settings) lets you turn analytics and crash reports (newer versions) on or off, and delete the analytics you’ve sent. Deleting erases the analytics sent under your current analytics ID from our servers and our working copy, turns analytics off, and gives the App a new ID; older versions also forward the request to Unity. If you’re offline, the App retries at each launch. Crash reports aren’t covered; see section 2.
Rights by Jurisdiction
Depending on where you live (e.g., EEA, UK, California), you may have rights to:
- Access, Correct, Delete: Request access to or deletion of your personal data.
- Withdraw Consent: You can withdraw consent for analytics, crash reports, or email marketing at any time.
- Object: You can object to processing based on legitimate interests (e.g., automatic crash reporting in older versions).
- Non-discrimination: We will not treat you differently for exercising your privacy rights.
- Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.
Security & Children’s Privacy
- Security: We apply reasonable administrative and technical safeguards: analytics are transmitted over encrypted connections (HTTPS/TLS), our first‑party analytics are stored pseudonymously without IP addresses, and access is restricted to Vibralizer’s founders and our disclosed processors on access‑controlled systems. However, no system is perfectly secure.
- Children: The App and Site are not directed to children under 13. We do not knowingly collect personal data from children. If you believe we have done so, contact us and we will delete it.
Contact
Email: privacy@vibralizer.com
For data collected by Vibralizer 0.4.3 and earlier, you may also contact Unity regarding its processing roles at DPO@unity3d.com.