Privacy

Last updated 29 October 2026

This page explains what happens to information you send through vikiangels.com and the Viki Angels mobile app. The site is run by Viki Angels. You can reach her at info@vikiangels.com.

What the site collects

Nothing that identifies you, unless you fill in the collaboration form, and nothing about you is sold. Fonts and images are served from this domain, not from anyone else's. The site shows no advertising. The only cookies it can set are Google Analytics cookies, described below.

The site is delivered through Cloudflare, which also counts page views using Cloudflare Web Analytics. That measurement uses no cookies, builds no profile of you and cannot follow you to other sites; it reports totals such as how many people opened a page and roughly where in the world they were.

The site also uses Google Analytics to see which pages are actually read. Outside the EU, the UK and Switzerland it stores two cookies in your browser (_ga and _ga_76BQZZ7WBY) so repeat visits in the same browser are counted once rather than many times. They hold a random number, not your name, and expire after two years. In the EU, the UK and Switzerland it stores no cookies at all and the site does not ask for consent: Analytics only sends a cookieless signal without any identifier, which Google counts in aggregate. Google receives the page you opened, roughly where in the world you are, and your device and browser type. Advertising features and ad personalisation are switched off in Analytics, and the site tells Google that no data may be used for advertising. Any browser setting or extension that blocks analytics cookies stops it, and the site works the same either way.

The collaboration form

When you send an application, the site records what you typed: your name, company, work email, optional website, campaign type, budget range and message. It also records the time, your IP address and your browser's user-agent string, which are used to block automated spam.

This is used for one purpose: to read your application and reply to it. It is never sold, never used for advertising and never sent to anyone else.

YouTube videos

The Watch section on the home page shows still images stored on this site, not YouTube players. Nothing is requested from YouTube and no cookie is set until you tap a video to play it. When you do, that one player loads from youtube-nocookie.com, Google's reduced-tracking domain, and from then on Google's privacy policy applies to it.

Where it is kept

Applications are stored on the site's own server in Germany and emailed to the address above, which is a Gmail account. They are kept for as long as the conversation is useful, and deleted on request.

Your rights

If you are in the EU or UK, the GDPR gives you the right to ask for a copy of what is held about you, to have it corrected, or to have it deleted. Write to info@vikiangels.com and it will be handled.

Links to other sites

The links on the home page lead to Instagram, Threads, TikTok, YouTube, X, Snapchat and Facebook. Once you follow one, that company's own privacy policy applies — this site has no control over it and receives nothing back from it.

Mobile app (Viki Angels for iOS and Android)

This policy also covers the Viki Angels app. It is made for adults (18+) and does more than the website: you can create an account, watch live streams and replays, chat, send private messages and gifts, comment on and like posts, and buy subscriptions, credits and coins.

Account. You can sign up with an email address and password, with Apple or with Google. Sign-in is handled by Firebase Authentication (Google LLC). The app stores your email address, the sign-in identifier from Apple or Google, a user ID, your confirmation that you are 18 or older, and your device’s language and time zone, which are used to send notifications in your language at sensible times.

Profile. Your display name, an optional bio and an optional profile photo are visible to other members. The photo is stored on our own server and delivered through Cloudflare.

Purchases. Subscriptions, message credits and coin packs are sold only through the App Store and Google Play; there are no other payment methods. Our server checks each purchase with Apple or Google and keeps a record of it (product, transaction ID and dates) so the app knows what you have bought. Your payment card details go to Apple or Google and never reach us.

Ads. The app shows banner, rewarded and app-open ads from Google AdMob, which receives your advertising ID, approximate location and device information. On iOS the app first asks for tracking permission (App Tracking Transparency), and your advertising ID is shared only if you allow it. Where the law requires it, including the EU and the UK, a consent message (Google User Messaging Platform) is shown before ads load; without consent the ads are not personalised. Watching a rewarded ad earns message credits or coins. Google confirms the reward directly to our server, so the ad request carries your user ID for that check. Premium subscribers see no ads.

Live streams, chat, private messages and gifts. Messages you write in live chats, private messages to friends, friend requests, gifts you send, and the users you block or report are stored so the app works and can be moderated: a moderator can mute you or delete a message, and you can block or report another user.

Comments and likes. Comments you write on posts are reviewed by a moderator and appear only after they are approved. Likes are stored with your user ID.

Notifications. If you allow notifications, the app stores an Expo push token to tell you when a live stream starts or someone sends you a message. You can turn this off in your device settings at any time.

Crash and error reports. If something goes wrong in the app, it sends a crash and error report to our own server so we can find and fix the problem: the error message, a stack trace, the app version, the device platform and, if you are signed in, your account ID. This copy is used for nothing else and is kept for 90 days. From version 1.0.1 crash reports also go to Firebase Crashlytics (Google): the stack trace, the app version, the device model and operating system, and a random installation ID, but not your account ID. Crashlytics is switched off together with Usage statistics.

Usage statistics. From version 1.0.1 the app records which screens are opened and which features are used (for example opening a live stream, sending a gift or completing a purchase), together with the app version, platform, device model, operating system and language. These records go to our own server, where they are kept for 90 days, and to Google Analytics for Firebase. No advertising ID is collected (Google Analytics uses a random app-instance ID) and your account ID is not sent to Google; on our server it is stored only as a salted one-way hash. Our server also works out an approximate country from the connection these records arrive on, using the DB-IP country database on our own server, and keeps only the two-letter country code; the IP address itself is not stored and is not sent to anyone for this. If you are signed in, the country is also saved with your account and deleted with it. You can switch this off under Profile → Usage statistics; nothing is sent while it is off.

App settings and security. The app loads its settings (for example the minimum supported version) from Firebase Remote Config, which uses a random Firebase installation ID and basic device information such as the app version, operating system version and language. Firebase App Check uses Google Play Integrity on Android and Apple App Attest on iOS to confirm that requests come from the genuine app on a real device; it gives us no identifier for you.

Invitations. Members can share a personal invite code. When someone joins with a code, both accounts receive coins; our server records the two accounts and a one-way hash of a random ID the app creates on the device, so the same device cannot claim the reward twice.

How long it is kept. Live streams are recorded and kept as replays for 7 days, then deleted automatically. Your account data is kept while your account exists. A backup of the app database is made each night and kept on our server in Germany, as an encrypted copy with Hetzner in the EU and as one copy held by the operator; older backups are deleted on a rolling basis, so deleted data also disappears from the backups within about three months.

Deleting your data. “Delete account” under Profile removes your account and the personal data associated with it. You can also ask by email at info@vikiangels.com.

Who processes it. Firebase (Google) for sign-in, the database, usage statistics, crash reports, app settings and App Check; Google AdMob for ads; Apple and Google for purchases; Expo for push notifications; Cloudflare, which delivers photos and videos; and our own server in Germany (Hetzner), which handles media, live streams, replays, crash and error reports and the app’s server functions.

Children

The site is not directed at children and does not knowingly collect information from anyone under 16. The app is for adults (18+) and does not knowingly collect information from anyone under 18.

Changes

If this policy changes, the date at the top changes with it.