Retain the minimum
MinuteVibe is designed to limit the amount and lifetime of application data.
Temporarily stored
Random identifier, encrypted envelope, technical dates, lifecycle state, response counts and encrypted replies.
Not stored in plaintext
Message, decision question, blocking reason, reading key and URL fragment secrets.
Technical metadata
The host, HTTP server or network protection may process metadata such as IP addresses. This is distinct from the encrypted Vibe content.
Memory on this device
Remembering is optional. No messages or objections are kept in the local registry; the control link is encrypted in IndexedDB. Malicious code running on this origin could still access it. Clear the vault through My Vibes.
One total, not a history
The counter stores only a cumulative number, without authors, content or an activity feed. Cleanup never reduces it. Older deleted creations are not reconstructed.
Expiry and cleanup
Access is refused immediately on expiry. Cron and successful creations trigger bounded cleanup. Hosting backups, infrastructure logs and recipient copies have separate lifetimes. No universal absence of copies is promised.
Installation is not offline access
A connection is still required to create, open or vote. The PWA caches only icons and visual identity assets. Pages, Vibes and their keys are never stored in that cache.
My Vibes is separate from the PWA cache. Only links you choose to remember are stored on this device. Installing the app neither enables that option nor synchronizes your links.
Where is my data
On this device
When you choose to remember access, My Vibes keeps local records and an encrypted control link in the browser vault. This is not an account synced across your devices.
In the service
MinuteVibe temporarily keeps an encrypted envelope, counted signals, encrypted objections and the metadata needed to operate. Reading keys remain in the links.
Remove from this device
This removes the selected local access. It does not close the Vibe for colleagues or delete their copies of the link.
Close the Vibe
The control screen requests deletion of the Vibe and its responses from active storage. Closure is confirmed on screen only after the service returns a successful response.
My Vibes states are calculated locally, without automatically checking the server. A passed deadline is not a purge attestation. The service refuses expired access; stored data is cleaned up by its purge process.
An exported copy does not disappear with the Vibe. The exact hosting backup rotation period remains to be confirmed: no date for erasing every copy is promised here.
From your browser to expiry
The Vibe text is encrypted in your browser before it is sent. The server keeps the encrypted envelope and data needed to operate, including its duration and received signals. Access is refused at expiry even if periodic cleanup has not yet removed the record. Hosting backups and logs have their own retention cycle, which this page does not certify.
A link is access, not identity
Anyone who has a complete link can exercise the rights it contains. Do not use the control link for sharing. No name is requested to give a signal, but this does not guarantee anonymity: context or an objection may identify someone. The service does not verify the sender's identity.
What happens when you leave the site
Contact, PayPal support, LinkedIn and MyProID are external links, not embedded modules. No scripts from these services are loaded to display the links; the MyProID logo is hosted locally. After you click, the destination applies its own policies. The messaging app you use to share a Vibe may also process the full link you give it.
Three useful everyday habits
Share the participant link only with the intended people. Avoid saving on a shared device. When you no longer need control, remove it from the browser; this local action does not destroy the Vibe on the server. Use the dedicated action in the alignment meter to delete it.
Understand and exercise your rights
For a data question or a request for access, correction, deletion, restriction or objection where applicable, contact Mehdi Kachouri using the linked form. Include no secrets. Limited data and the absence of accounts may restrict identification of a record; the server cannot reconstruct a message without its key. You may also contact the CNIL. Legal bases and support-data retention periods still need to be specified in the final contractual version.
Your local access links and copies
My Vibes remains local, with no account or server synchronization. The JSON inventory holds metadata without access links or keys and cannot restore access. A separate backup protects selected control links with a passphrase, using PBKDF2-HMAC-SHA-256 and AES-256-GCM in the browser. You can explicitly preview and import it in another browser; it does not extend a Vibe or include its messages or responses. The file, passphrase and imported links are not sent to the service. A compromised device or site script can access secrets in use. A manually added link uses a locally declared deadline, not a server-verified one.
The file stays on your device until you remove it. It does not extend a Vibe or recover a lost link. We cannot reset its passphrase. A compromised device or script remains a risk.
My Vibes