Legal
PRIVACY POLICY.
Last updated: 20 August 2026. Written for the EU/UK GDPR — plain language, no legalese we don't need.
For the beta waitlist and trip proposals, see the dedicated beta privacy notice.
Who's responsible for your data
Alessandro Vaccari, operating VanTribes, is the data controller for the personal data described below. Use the contact page or info.nomadvan.life@gmail.com for privacy requests.
What we collect
Waitlist details — email, Italian region, primary interest, language, source, privacy notice version and optional marketing consent. Account details you give us directly — name, email, username, bio, profile and van photos, your rig type and vibes. Event and trip data you create or join — event details, tribe chat messages, direct messages, ride-share status, reviews. If you opt into the tribe map, an approximate location (nudged by ~2 km before it's stored — we never store your exact coordinates, and this is entirely opt-in). Basic, cookieless usage analytics (pages viewed, no personal identifiers, no cross-site tracking) to understand what's working.
Our legal basis for each use
- Contract — running your account, showing events, powering chat, connecting you with hosts. We can't provide the service without this.
- Consent — the tribe map (opt-in, revocable any time in Settings) and optional marketing emails.
- Legitimate interest — basic anonymous analytics, fraud/abuse prevention (blocks, reports), keeping the service secure.
How we use it
To run the core service: showing you events, letting you join tribes, powering chat and notifications, and connecting you with hosts and fellow travellers. We do not sell your data, and we do not share it with advertisers. Payments happen in person between you and the host — VanTribes never sees or processes your money.
Who can see what
Your public profile (name, avatar, bio, rig, vibes, hosted events) is visible to anyone. Tribe chat and direct messages are visible only to people who share an event with you. Your tribe-map pin, if enabled, is visible to other signed-in members within its ~2 km fuzz radius and fades automatically after 30 days without a refresh. You can block another member at any time, which hides you from each other's map and messages.
Who processes it for us
We keep the list of sub-processors short, and none of them use your data for their own purposes:
- Supabase for database, authentication and file storage. The connected VanTribes database is hosted in US West; the beta collection notice describes this explicitly.
- Vercel for hosting and cookieless web analytics.
- Email provider: no transactional-email provider is configured in this repository; this notice must be updated before email delivery is enabled.
Provider terms and safeguards for processing outside the EU/UK are under review. Public personal-data collection remains closed until this review is complete. We don't use ad networks or data brokers.
How long we keep it
While your account is active, plus a documented period needed for security, abuse and dispute records. A deletion request is complete only when the secure cleanup service confirms it; data that must be retained by law is handled separately. The final retention schedule must be approved before personal-data collection starts.
Your rights — and how to use them
You have the right to, at any time:
- Access & port your data — download the core in-app records as JSON, then contact us for a complete export that also covers operational records.
- Rectify it — edit your profile any time in Settings.
- Erase it — request permanent deletion from Settings. The app confirms only after backend cleanup succeeds.
- Restrict or object to processing — turn off the tribe map or email notifications any time in Settings, or contact us for anything else.
- Withdraw consent — same as above; withdrawing doesn't affect anything already done while consent was active.
- Complain — to us first, please, but you can also lodge a complaint with your national data protection authority (in Italy, the Garante per la protezione dei dati personali, or your own country's equivalent).
Cookies & tracking
We keep this deliberately simple: the only cookie we set is a strictly-necessary session cookie that keeps you signed in — it's exempt from consent requirements under the ePrivacy Directive because the site can't function without it. Our analytics (Vercel Web Analytics) is cookieless by design — no persistent identifiers, no cross-site tracking, nothing to consent to. We don't use advertising cookies, third-party trackers, or fingerprinting, so there's no cookie banner blocking your way in.
Age requirement
VanTribes sets an independent minimum age of 16. We ask you to confirm this when you sign up.
Questions
Use the contact page or email info.nomadvan.life@gmail.com.