Privacy policy

An account. Signing up takes an email address, a password and a display name you choose. Passwords are handled by Supabase, the site's authentication provider, and are never visible to us. Your email address is used to confirm your account, sign you in and reset your password. It is never shown publicly.

Sign in with Google. If you use Google to sign in, Google shares your email address and basic profile details with the site. The email address identifies your account. Your Google name is not published anywhere: the name on your reviews is always the display name you choose here.

Reviews. A review includes your rating, what you wrote, the date you attended and the venue, plus any optional ratings you add. Reviews are public and appear under your display name.

Photos. You can add up to three photos to a review. They are resized on your device before they are uploaded, which removes the technical data a camera stores in a photo, including location. Photos are public with the review and are removed with it. Only post photos you took and are happy for anyone to see.

Videos. You can attach one link to a TikTok, YouTube or Instagram video. The site stores the link, the video's title and account name, and a copy of its thumbnail; the video itself stays on that platform. It plays only when someone taps it, and from that moment that platform's player, with its own cookies, is on the page. The link is public with the review and is removed with it.

Votes and reports. Marking a review as helpful, or reporting one, is stored. Who voted or reported is never shown publicly.

Errors. When a page fails, the site keeps a record of the error: the message, the address of the page, the browser it happened in and the page that linked to it. It holds no account, no email address and no IP address, and it exists only so problems can be found and fixed.

Your display name, your reviews and the scores computed from them. Your reviewer page collects your reviews in one place and is kept out of search engines. Your email address is never public.

No ads. No selling data. No tracking cookies. No marketing emails. Analytics are cookieless and aggregate (Vercel Analytics, and Vercel Speed Insights for how fast pages load), so the site can count visits and measure speed without recognising visitors.

The only cookies are the ones that keep you signed in, plus a short-lived marker used during password reset. Essential ones only, which is why the site never asks you to accept them.

Venue and search results are ordered by distance using the approximate location that comes with your connection. It is read on each request to sort results, and the site does not store it.

The site sends account email only: confirmation and password reset messages, delivered through Resend. There is no newsletter.

The database and authentication run on Supabase. The site runs on Vercel. Both process the data described here on the site's behalf.

You can edit or delete your reviews at any time, and change your display name at Account. When you edit a review, the previous version is kept internally. If moderation removes a review, an internal record of the removed text and the reason is kept, so removals stay accountable.

To delete your account, or to ask anything about your data, write to carlos@vivorating.com.

If this policy changes, the new version appears here with a new date.