ClapBackClub
Privacy
Effective date: 13 August 2026
Last updated: 13 August 2026
This Privacy Policy explains how ClapBackClub collects, uses, shares, and protects personal data when you visit or use the ClapBackClub website, applications, and related services (together, the “Service”).
1. Who controls your personal data
The data controller is:
ManaVibe Tech Korlátolt Felelősségű Társaság (“ManaVibe Tech Kft”)
Company registration number: 01-09-442264
Tax number: 32780495-2-41
Registered address: 1138 Budapest, Népfürdő utca 22. B. ép. 15. em., Hungary
In this Policy, “ClapBackClub,” “we,” “us,” and “our” refer to ManaVibe Tech Kft.
2. Personal data we collect
We may collect the following categories of personal data.
Account and profile data
Email address
Username and display name
Password, stored only as a secure one-way hash
Profile avatar and profile settings
Account status, registration date, and login history
When you upload a profile avatar, we validate it and create processed WebP versions. We do not retain the original uploaded avatar after processing.
Community activity
Situations, clapbacks, comments, and other text you submit
Votes, likes, saved content, follows, blocks, and other interactions
Sharing activity, including the sharing method selected
Notifications and notification status
Reports, report reasons, and any details provided to moderators
Moderation decisions, warnings, restrictions, appeals, and related correspondence
Your username, avatar, situations, clapbacks, and other content intended for publication may be visible to anyone. Public content may be copied, shared, quoted, reposted, or indexed if search-engine indexing is enabled. Do not post private, confidential, or sensitive personal information about yourself or anyone else.
Communications
Messages sent to support, privacy, moderation, or other contact addresses
Responses to surveys or feedback requests
Email preferences and consent records
Records of service, security, billing, and marketing communications
Subscription and transaction data
If you purchase ClapBackClub PRO, we may receive:
Your selected payment provider
Payment status and transaction reference
Subscription plan, start date, renewal date, cancellation date, and entitlement status
Billing details required for accounting, tax, fraud prevention, or customer support
Payments are handled by Stripe or PayPal. ClapBackClub does not receive or store your complete payment-card number. Stripe and PayPal process payment information under their own privacy notices.
Technical and security data
IP address
Browser, device, and operating-system information
Pages requested, timestamps, referring page, and basic usage logs
Session identifiers and authentication events
Security, fraud, rate-limit, and error logs
Cookie and browser-storage information described below
We do not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on you.
3. Why we use personal data and our legal bases
We process personal data only when we have a lawful basis under applicable data-protection law.
| Purpose | Data commonly used | Legal basis |
|---|---|---|
| Create and manage accounts, authenticate users, and provide requested features | Account, profile, session, and community activity | Performance of our contract with you |
| Publish situations, clapbacks, profiles, votes, and other community activity | Profile and community activity | Performance of our contract with you |
| Process PRO subscriptions and provide paid features | Account, transaction, and subscription data | Performance of our contract with you |
| Send essential account, security, moderation, billing, and service messages | Account and communications data | Performance of our contract; legitimate interests in operating and securing the Service; legal obligations where applicable |
| Moderate content, investigate reports, enforce rules, prevent abuse, and protect users | Community activity, reports, communications, and technical data | Legitimate interests in maintaining a safe, lawful, and trustworthy community; legal obligations where applicable |
| Detect fraud, secure accounts, diagnose errors, and defend legal claims | Technical, security, account, transaction, and moderation data | Legitimate interests in security, fraud prevention, and legal protection; legal obligations where applicable |
| Respond to support and privacy requests | Account, communications, and relevant activity data | Performance of our contract; legal obligations; legitimate interests in customer support |
| Improve features and understand aggregate use of the Service | Usage, interaction, and technical data | Legitimate interests in improving the Service; consent where non-essential tracking requires it |
| Feature, edit, reproduce, and promote public User Content on ClapBackClub channels, including social media | Public posts, username, avatar, and public interaction data | Performance of our contract and our legitimate interests in operating and promoting ClapBackClub, subject to the User Content licence in our Terms |
| Send promotional emails | Email address and communication preferences | Consent, or another basis expressly permitted by applicable electronic-marketing law |
| Keep accounting, tax, compliance, and transaction records | Transaction, billing, and account data | Legal obligations |
Where we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against your rights and reasonable expectations. You may object to this processing as explained below.
4. Public content and social-media use
ClapBackClub is a public community. Content you submit for publication may be displayed, reformatted, shortened, edited, translated, combined with graphics, or shared through ClapBackClub’s website, apps, official social-media accounts, promotional material, and other media, as described in our Terms.
This may include your public username and avatar. We may also publish content without identifying your account. Social-media posts and third-party copies may remain available after you delete your account or remove the original post because we may not control copies already published or reshared outside the Service.
Do not include another person’s real name, contact details, private messages, image, or other personal data unless you have a lawful right and all necessary permission to share it.
5. Cookies and browser storage
ClapBackClub currently uses technologies necessary to operate the Service and remember your preferences.
Strictly necessary session cookie
The clapbackclub_session cookie maintains your session, supports account authentication, and protects the Service. It is marked Secure, HttpOnly, and SameSite=Lax. It is generally deleted when the browser session ends, unless your browser retains it for longer.
Local browser storage
We use local storage to remember choices such as light or dark mode and preferred text size. These preferences remain until you change them or clear your browser data.
We use session storage for temporary functions such as returning you to an intended action or restoring your place in a feed. This information normally disappears when the relevant browser session ends.
We will request consent before using non-essential cookies or similar technologies for analytics, personalised advertising, or comparable tracking where consent is legally required. If these technologies are introduced, the consent interface will provide more specific information and controls.
6. When we share personal data
We may share personal data only as reasonably necessary with:
Hosting, infrastructure, database, security, backup, and technical-service providers
Email-delivery and customer-support providers
Stripe, PayPal, and other payment or fraud-prevention providers selected by you
Advertising or analytics providers, but only with the required notice and consent where applicable
Professional advisers, including lawyers, accountants, auditors, and insurers
Courts, regulators, law-enforcement bodies, and public authorities when disclosure is legally required or reasonably necessary to protect rights, users, or the public
A buyer, investor, successor, or adviser involved in a proposed or completed merger, acquisition, financing, restructuring, or sale of all or part of our business, subject to appropriate confidentiality and data-protection safeguards
Social-media platforms when public User Content is posted to official ClapBackClub channels or when you choose to share content through those services
Our service providers may use personal data only for the contracted services, unless they act as independent controllers and provide their own privacy terms.
We do not sell personal data for money.
7. International data transfers
Some providers, including payment, email, social-media, security, or infrastructure providers, may process personal data outside Hungary or the European Economic Area.
When required, we use legally recognised safeguards such as an adequacy decision, the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism. You may contact us for information about the safeguards relevant to your personal data.
8. How long we retain personal data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security, and dispute-resolution requirements.
Our usual retention approach is:
Account and profile data: while the account remains active, then deleted or anonymised within 30 days after closure, except where longer retention is necessary
Public User Content: while published; removed content may remain in backups for up to 90 days and in previously created social-media or promotional materials as explained above
Security and access logs: normally up to 12 months, or longer when needed to investigate abuse, fraud, or a security incident
Reports and moderation records: normally up to 3 years after the relevant decision or account closure, or longer if needed for safety, repeat-abuse prevention, or legal claims
Support and privacy correspondence: normally up to 2 years after the matter is closed
Transaction and accounting records: for the period required by applicable tax, accounting, payment, and anti-fraud laws
Marketing preferences and consent records: until you withdraw consent or object, plus any period reasonably necessary to demonstrate compliance and maintain an unsubscribe record
Backups: normally overwritten within 90 days, unless preserved for security, disaster recovery, or legal reasons
We may retain limited information longer when necessary to comply with law, establish or defend legal claims, enforce restrictions, prevent repeated abuse, or honour an opt-out request.
9. Emails and notifications
We may send emails necessary to operate your account or the Service, including verification, password-reset, security, moderation, billing, subscription, legal, and important service-update messages. You cannot opt out of essential messages while keeping an affected account or subscription active.
We send promotional emails only when legally permitted. Where consent is required, promotional emails require a separate opt-in. Every promotional email will provide a simple way to unsubscribe. Withdrawing marketing consent does not affect essential service communications.
10. Your data-protection rights
Depending on the circumstances and applicable law, you may have the right to:
Receive information about how we process your personal data
Access your personal data and obtain a copy
Correct inaccurate or incomplete personal data
Request deletion of personal data
Restrict certain processing
Receive certain data in a structured, commonly used, machine-readable format and transmit it to another controller
Object to processing based on legitimate interests
Object at any time to direct marketing
Withdraw consent at any time, without affecting earlier lawful processing
Lodge a complaint with a supervisory authority
These rights are not absolute. For example, we may retain information required by law, needed to protect other users’ rights, or necessary to establish, exercise, or defend legal claims.
To exercise a right, contact us with the subject “Privacy Request.” We may ask for information reasonably necessary to verify your identity. We normally respond within one month, subject to any extension allowed by law.
You may complain to the data-protection authority where you live, work, or believe an infringement occurred. Our lead supervisory authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): https://www.naih.hu/.
11. Security
We use technical and organisational measures designed to protect personal data, including hashed passwords, encrypted HTTPS connections, restricted administrative access, secure session settings, input validation, and security logging.
No online service can guarantee absolute security. You are responsible for using a strong, unique password and keeping your account credentials confidential. Contact us immediately if you believe your account has been compromised.
12. Children
ClapBackClub is not intended for children under 16. We do not knowingly create accounts for children under 16. If you believe a child has provided personal data contrary to this rule, contact us so we can review and delete it where appropriate.
Users under the age of legal majority may use paid features only with the involvement and permission of a parent or legal guardian where required by law.
13. Third-party services and links
The Service may link to social networks, payment providers, and other third-party websites. Those services control their own processing and are governed by their own privacy notices. We are not responsible for a third party’s privacy practices.
14. Changes to this Policy
We may update this Policy when our Service, providers, or legal obligations change. We will post the revised version with a new “Last updated” date. If a change materially affects your rights or how we use personal data, we will provide additional notice where required.
15. Contact
For privacy questions or requests:
ManaVibe Tech Kft
1138 Budapest, Népfürdő utca 22. B. ép. 15. em., Hungary