Vice Hub

Privacy Notice

Last updated: 23 June 2026

1. Who we are

Vice Hub is operated by Matty Schatz, an individual sole trader, who acts as the data controller for personal data processed through this site. Contact: vicehubadmin@gmail.com.

2. Personal data we collect

  • Account data — email address, display name, hashed password or OAuth identifier.
  • Profile data — display name, avatar, optional bio.
  • Content you submit — crew listings, tips, guides, chat messages, applications.
  • Support data — messages and attachments you send to us.
  • Technical data — IP address, device identifiers, browser type, basic usage telemetry, error logs.

Payment data (card details, billing address) is collected directly by Stripe on Stripe's own checkout and is not processed by us. See Stripe's privacy notice.

3. Why we use it and legal basis

  • Provide the service (account, content, members-only features) — contract performance.
  • Security and fraud prevention — legitimate interests in protecting the service and our users.
  • Customer support — contract performance and legitimate interests.
  • Product improvement (aggregated usage analytics) — legitimate interests.
  • Legal compliance (e.g. tax records via Stripe) — legal obligation.
  • Marketing — only with your consent; you can withdraw at any time.

4. Who we share it with

  • Stripe — our reseller and Merchant of Record, for processing payments, managing subscriptions, handling tax calculation, collection and invoicing, fraud protection, and chargeback handling.
  • Hosting and infrastructure subprocessors — Supabase (database, auth), Cloudflare (edge hosting and DDoS protection).
  • Email delivery — providers we use to send account and transactional email.
  • Professional advisers — legal and accounting professionals where needed.
  • Authorities — where required by law, court order, or to protect rights and safety.

5. International transfers

Some subprocessors process data outside the UK / EEA (for example in the United States). Where this is the case, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or applicable adequacy decisions.

6. Data retention

We keep account data for as long as your account is open. If you delete your account, we delete or anonymise personal data within 90 days, except where we are legally required to retain it (e.g. tax records — typically up to 10 years, held by Stripe). Public content you posted (crews, approved guides) may remain visible after account deletion in anonymised form.

7. Your rights

If you are in the UK / EEA, you have the following rights under GDPR:

  • Access, rectify, or erase your personal data.
  • Restrict or object to processing, including direct marketing.
  • Data portability.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with your local supervisory authority.

To exercise these rights, email vicehubadmin@gmail.com. We will respond within one month.

8. Security

We use appropriate technical and organisational measures — including encryption in transit (HTTPS), encryption at rest for the database, role-based access controls, and row-level security — to protect personal data. No system is perfectly secure, but we work hard to keep yours safe.

9. Cookies

We use a small number of cookies and similar storage:

  • Essential — sign-in session, CSRF protection. Required for the service.
  • Analytics — aggregated usage telemetry to help us improve the site.

You can manage cookies in your browser settings; disabling essential cookies will break sign-in.

10. Children

Vice Hub is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes

We may update this notice from time to time. Material changes will be announced on the site.