Privacy Policy

1. Who we are

This website, Vintage Nostalgia (vintagenostalgia.net), is owned and operated by Webcraft Media S.R.L., a company registered in Romania with the sole registration number (CUI) 48975727 ("Webcraft Media", "we", "us" or "our"). Webcraft Media is the data controller responsible for the personal data described in this policy.

Vintage Nostalgia is a movie, television, music and pop-culture nostalgia platform where visitors can play trivia quizzes, take on challenges, play games, earn XP and badges, build streaks, climb leaderboards and create their own quizzes. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it and what rights you have. It is written for our Romanian and EU audience, and for the international visitors we welcome from around the world.

If you have any question about this policy or about your personal data, please contact us through our contact page.

2. What this policy covers

This policy covers vintagenostalgia.net and the account features on it. Our online shop at shop.vintagenostalgia.net, including checkout, payments and membership billing, is operated by Fourthwall on our behalf and is also subject to Fourthwall's own privacy practices. See "The Vintage Nostalgia Shop, memberships and payments" below.

3. The personal data we collect

Account information

When you create an account we collect your display name, username, email address and a password. Your password is never stored in readable form; we keep only a secure one-way hash of it. You may optionally add profile details such as an avatar, a banner image, a short bio, your location, your favorite decade and topics, a personal website and links to your social profiles.

Signing in with Google or Apple

You can choose to create an account or sign in using a third-party provider such as Google or Apple. If you do, the provider confirms your identity to us and shares a limited set of details, typically your name, email address and a unique identifier for your account with that provider. We store that identifier so we can recognize you next time. We never receive your password for that provider. Your use of the provider's sign-in service is also governed by that provider's own terms and privacy policy.

Public and private profiles

By default your profile is public, which means your username, avatar, level, rank, badges, selected stats and recent activity can be seen by other visitors at your profile page. You can switch your profile to private at any time in your account settings. When your profile is private, you appear as an anonymous "private member" across the site, including on leaderboards and next to any content you create, and your stats, badges and activity are withheld from public view.

Activity and progress data

As you use Vintage Nostalgia we record the activity needed to run your account and the game features. This includes your quiz, challenge and game results and scores; XP, levels, ranks and your Performance Score; badges earned; streaks; leaderboard positions; ratings you give; comments you post; likes; the members, quizzes and badges you follow; goals; Golden Ticket activity; Bravo gifts you send or receive; and your in-app notifications.

Content you create or submit

We store the quizzes you build, the comments you post and the ratings you leave. Published quizzes and approved comments are public and are shown next to your profile, or next to a "private member" label if your profile is private.

Contact form

When you use our contact form we collect your name, email address, the reason for your message, a subject and your message, so we can reply. A contact message is delivered to our team by email; it is not saved to a public area of the site.

Feedback form

When you send feedback through our feedback form, we collect your message and, if you choose to provide them, your name, email address and an optional image attachment. Feedback can be sent without giving your name. To help us prevent abuse of the form, we also record the IP address and browser information of the submission, together with the date on which you accepted this policy and our Terms.

Newsletter preference

If you tick the newsletter box when registering, we record that you would like to receive our newsletter. Our newsletter is not live yet (see "Newsletter" below), so recording this preference does not currently result in any marketing email being sent.

Playing as a guest

You can play quizzes and use some other features without an account. Guest play is kept to a minimum: your quiz result is stored against a random, anonymous token held in your browser session so we can show you your score, and it is not linked to a public profile, your name or your IP address. If you later create an account, some guest activity, such as likes, may be merged into your account.

Technical and device data

Like every website, we process some technical information so the site works and stays secure. This includes your IP address, browser and device information, and server logs. Your active login sessions are stored with the IP address and browser used, so you stay signed in and so we can protect your account. We also use your IP address at the moment you submit certain forms to check you are not a bot (see "Cookies and similar technologies") and to limit abuse; outside the specific cases described in this policy, we do not keep your IP address against your profile.

Payment and order data

Purchases and membership billing are handled entirely by Fourthwall. We do not collect or store your card number, card security code or bank details. We receive only the non-payment information we need to give you what you bought, such as your order or subscription reference, the plan and billing interval, the amount and the status. See the Shop section below.

4. Cookies and similar technologies

What cookies are

Cookies are small text files placed on your device by a website. Similar technologies, such as your browser's local storage, work in comparable ways. We use only a small number of cookies. Some are necessary to run the site and keep it secure, and a few remember your choices. With your consent, we may also use Google Analytics cookies. We do not use advertising cookies.

Strictly necessary cookies

These are required for the site to function and cannot be switched off through a consent tool. They include:

• a session cookie (named "vintage-nostalgia-session") that keeps you signed in and holds your session while you browse;
• a security cookie ("XSRF-TOKEN") that protects forms and requests against cross-site request forgery;
• a "remember me" cookie, set only if you choose that option at login, so you do not have to sign in on every visit.

Functional and preference cookies

These remember choices you make so the site behaves the way you expect. For example, a functional cookie ("vn_visitor") lets us count a "like" from a signed-out visitor without asking you to log in; only a scrambled (hashed) form of its value is stored on our side, with no IP address and no fingerprinting. Some preferences, such as game sound settings and dismissed banners, are stored in your browser's local storage rather than in a cookie, and never leave your device.

Analytics cookies

We offer an Analytics category, which we use for Google Analytics to understand how the site is used. Google Analytics is only loaded, and its cookies are only set, when we have set it up and you have given your consent through our cookie banner. If you do not consent, no analytics is loaded and no analytics requests are made; if you withdraw consent, Google Analytics stops loading and, where we can, we remove its first-party cookies.

Advertising and marketing cookies

Vintage Nostalgia does not show advertising today and sets no advertising or marketing cookies. See "Advertising" below for what would change if we introduce ads.

Third-party cookies

Some features rely on third parties that may set their own cookies in your browser:

• Cloudflare Turnstile, the "are you human?" check used on some forms, may set cookies to perform its bot-protection function.
• Embedded media, such as a Spotify player or a YouTube video included in a story, may set cookies when you interact with it. We use YouTube's privacy-enhanced mode where possible.

Your choices and managing cookies

When you first visit Vintage Nostalgia, a cookie banner lets you accept all optional cookies, reject the optional cookies, or open the advanced view to choose each category on its own. Necessary cookies are always on and cannot be switched off. You can change your choices, including withdrawing consent you gave earlier, at any time using the "Cookie Settings" link in the site footer. If we materially change our cookie practices, we may ask you to review your choices again. You can also control cookies through your browser settings, including deleting existing cookies and blocking new ones. If you block strictly necessary cookies, parts of the site, such as signing in, will not work correctly.

5. Why we use your data and our legal bases

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• To provide the service you asked for (performance of a contract): creating and running your account, saving your progress, showing your profile, leaderboards and the content you create, and processing your membership and orders through Fourthwall.
• For our legitimate interests: keeping the platform safe and fair (including bot protection and preventing cheating, spam and abuse), moderating user-created content, understanding and improving how the site is used, and defending our legal rights, always balanced against your interests and rights.
• With your consent: sending our newsletter once it launches, and any future use of non-essential cookies such as analytics or advertising cookies. You can withdraw consent at any time.
• To comply with a legal obligation: for example, keeping records required by law and responding to lawful requests from authorities.

6. Advertising

There is no advertising on Vintage Nostalgia today, and we do not use any ad network or advertising cookies. We may introduce advertising in the future. If we do, we will update this Privacy Policy and our cookie information before ads go live, clearly describe any advertising partners and cookies involved, and, for visitors in Romania, the EU and other regions that require it, ask for your consent to advertising or tracking cookies through a consent tool.

7. Newsletter

We plan to offer an email newsletter, delivered through the email marketing service Kit (kit.com). This is not active yet; the sign-up form you may see on the site is a placeholder while we prepare it. When the newsletter launches, subscribing will be voluntary and based on your consent. If you subscribe, your email address and basic subscription information will be processed by us and by Kit for the purpose of sending the newsletter. Every newsletter email will include an unsubscribe link, and you will be able to withdraw your consent and unsubscribe at any time.

8. The Vintage Nostalgia Shop, memberships and payments

Our shop, the Vintage Nostalgia Shop, is available at shop.vintagenostalgia.net and is powered by Fourthwall. It is used for digital products, memberships and subscriptions, and merchandise. Checkout, payment processing, billing, subscription charges and refunds are handled by Fourthwall and its payment providers, who act as the merchant of record for these transactions.

When you buy a membership or a product, you complete payment on Fourthwall's hosted checkout, not on vintagenostalgia.net. We never see or store your full card number or security code. Fourthwall confirms your purchase to us and sends the limited order and membership details we need to unlock your benefits, support your purchase and manage your account. The information you provide during checkout is also processed under Fourthwall's own privacy practices, and we encourage you to read them.

For anything about billing, orders, payments, subscription charges, refunds or other shop-order issues, please use the Fourthwall shop's dedicated form at shop.vintagenostalgia.net/contact/order-placed. For privacy questions or anything specific to vintagenostalgia.net, please use our contact page.

9. Who we share your data with

We do not sell your personal data. We share it only with the service providers that help us run Vintage Nostalgia, and only as far as needed for them to provide their service to us. These providers act as our processors under a contract, or, where they determine their own purposes (such as Fourthwall for payments), as separate controllers. The main providers we use today are:

• Fourthwall: operates the Vintage Nostalgia Shop and processes payments, memberships, orders and refunds.
• Bunny.net: stores and delivers images through a content delivery network, including avatars and banners you upload.
• ElasticEmail: delivers our transactional emails, such as account verification and notifications.
• Cloudflare: provides the Turnstile bot-protection check on certain forms; when a protected form is submitted, your IP address and a challenge token are shared with Cloudflare to confirm you are not a bot.
• Google (and, where offered, Apple): provides optional "sign in with" authentication, if you choose to use it.
• Kit: will process newsletter subscriptions once the newsletter launches.

We also draw on content sources such as Wikimedia Commons, Europeana, the Smithsonian and Deezer to bring in public-domain and openly licensed images and music information. These are used to build the content on the site and do not involve sharing your personal data. We may also disclose personal data where required by law or to protect our rights, our users or the public.

10. International data transfers

Some of our service providers are based outside the European Economic Area (EEA) or operate global infrastructure, which can mean your personal data is transferred to, or accessed from, countries outside the EEA. Where that happens, we rely on appropriate safeguards recognized under the GDPR, such as an adequacy decision by the European Commission or the European Commission's Standard Contractual Clauses, so that your data continues to receive an equivalent level of protection.

11. How long we keep your data

We keep your account data for as long as your account exists. When you delete your account, we delete or anonymize the personal data associated with it, although we may retain anonymized, aggregated statistics (such as overall quiz results) that no longer identify you, and any records we are required to keep by law. Login sessions expire automatically after a period of inactivity. Feedback submissions, including the technical details recorded with them, are kept only as long as needed to handle the feedback and to prevent abuse, and are then deleted. We do not keep personal data for longer than necessary for the purposes described in this policy.

12. How we protect your data

We take reasonable technical and organizational measures to protect your personal data, including hashing passwords, encrypting sensitive fields, serving the site over encrypted connections, restricting access to accounts and admin tools, and using bot protection to defend our forms. No online service can be completely secure, but we work to keep your data safe and to respond quickly if a problem arises.

13. Your rights

If you are in the EU, the EEA or another region with similar laws, you have the following rights over your personal data:

• Access: to be told what personal data we hold about you and to receive a copy.
• Rectification: to have inaccurate or incomplete data corrected.
• Erasure: to have your personal data deleted (the "right to be forgotten").
• Restriction: to ask us to limit how we use your data in certain circumstances.
• Objection: to object to processing based on our legitimate interests.
• Portability: to receive certain data in a portable format, or have it sent to another provider.
• Withdraw consent: to withdraw any consent you have given, such as for the newsletter, at any time, without affecting processing that already took place.

You can exercise many of these rights directly in your account settings, and you can update much of your profile information yourself. To make any other request, contact us through our contact page. You also have the right to lodge a complaint with a data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro); you may also contact the authority in your own country.

14. Deleting your account and data

You can delete your account at any time from your account settings, which removes your personal data as described under "How long we keep your data". If you are unable to access your account, or you would like us to help, contact us through our contact page and we will assist you. Please note that membership billing is managed by Fourthwall, so cancelling a paid membership is done through the shop; deleting your Vintage Nostalgia account does not by itself cancel a Fourthwall subscription.

15. Children and minimum age

Vintage Nostalgia is intended for people aged 16 and over, and you confirm that you are at least 16 when you create an account. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it.

16. Changes to this policy

We may update this Privacy Policy as Vintage Nostalgia evolves or as the law requires. When we make significant changes, we will update the "Last updated" date shown on this page and, where appropriate, tell you on the site. We encourage you to review this page from time to time.

17. Contact us

For any privacy question, to exercise your rights, or for anything else specific to vintagenostalgia.net, please reach us through our contact page. For billing, orders, payments, subscriptions and refunds, please use the shop's form at shop.vintagenostalgia.net/contact/order-placed.