Privacy

VAPOR//VOID · last updated 25 September 2026

VAPOR//VOID is run by an independent developer based in the United Arab Emirates ("we"), who decides how your data is used (the "controller"). It's built to know as little about you as possible: no sign-up, no profile, no tracking cookies.

What we collect, and why

• An anonymous account id, created automatically so rooms, purchases and safety tools work. It isn't linked to your name or email unless you add an email to keep your purchases.
• Your messages, including ones our filter blocks, kept for up to 30 days so we can review reports and keep rooms safe. They disappear from the room after a few seconds.
• Reports you make or that are made about messages, kept until reviewed and then for up to 12 months.
• Room presence: which room you're in, updated while you're there and deleted shortly after you leave.
• Your Vapour balance, items and purchase history, so you keep what you buy.
• Usage events (for example: visited, puffed, shared, bought), tied only to your anonymous id, to understand how the product is used. No cookies, no advertising trackers.
• Settings on your device (room, flavour, streak, sound) are stored in your browser's local storage, not on our servers.

Who else processes it

• Supabase hosts our database and realtime rooms (London, UK).
• Anthropic: when you send a message, it and the few recent messages in the room may be sent to Anthropic's Claude API to write a Regular's reply. It isn't used to train their models.
• Paddle handles payments as merchant of record. We never see your card details; Paddle's own privacy policy applies to checkout.
• Our hosting provider (Railway), which runs the app servers.

Children

VAPOR//VOID isn't for anyone under 13. If you believe a child under 13 is using it, contact us and we'll remove their data.

Which laws apply

We follow the data protection law of where we're based, the UAE Personal Data Protection Law, and, because people in the UK and the EU use VAPOR//VOID, the UK GDPR and the EU GDPR as well. Some of our providers (for example Anthropic) process data outside your country; where that happens we rely on their standard contractual safeguards.

Your rights

You can ask to access, correct or delete your data, or object to how we use it. Email [email protected] with your anonymous id (shown in the room info panel). You can also complain to a data protection authority: in the UK the ICO, in the EU the authority in your country, and in the UAE the UAE Data Office.

Changes

We'll update this page if anything changes, and show the new date at the top.

About · Pricing · Terms · Privacy · Refunds · Community rules · [email protected]