Legal
Version 3 (16 Oct 2026) compared with version 2 (14 Oct 2026)
What changed
New section on usage statistics: Vietlume counts the screens you open and the features you use (no IP address, nothing you type), keeps them 90 days, and you can turn this off on the website and in the app.
02What we collect
… 1 unchanged blocks
Create an account or sign in — see section 03.
Turn on notifications on the site or in the app — section 03.
Comment, rate, vote on whether a place is worth going to, save places, plan a trip or report content — section 04.
Join Vietlume Studio — apply as a creator, send photos and field notes, claim a place or declare your stay — section 04.
Press the locate button on the map — section 05.
Use Using the site: a few actions are counted so we know which website or the app: Vietlume counts visits, the screens you view and the features help you use, with your device type and where you came from — section 06.
Your browser keeps a few choices such as language and colour theme — section 07.
Use the app and allow location, the camera, photos or notifications — section 08.
… 1 unchanged blocks
06Usage and technical data
Vietlume counts a few actions — filtering by vibe, searching an area — with for itself how the city, district website and time, the app are used, to learn how many people use them, where they come from and which features are useful. Each browser browser, and each app install, carries a random id with no name or email in it; when it. Each time you are signed in, open Vietlume we record: website or app; the actions are linked to page that sent you (only its domain, for example google.com) and the link's utm_ tags; whether you opened it from a notification or from a link (for example a shared link) is also recorded as where you came from; the country and province estimated from your account. You can turn this off in section 07.IP address by Vercel (section 11); your device's language and time zone; the device type (phone, tablet, computer), operating system and browser with their main version number, and the app version; screen size, window size (rounded to 10 pixels), pixel density and orientation. During that visit we record the names of the screens you view (for example "Map") and of the features you use (for example "Save to folder"), with the time.
We do not store your IP address or your browser's raw identification string (User-Agent — we keep only the name and main version read from it), and we do not record page paths or addresses, which places or folders you open, or anything you type, and we do not fingerprint your device. When you are signed in — even if you sign in partway through — the whole visit is linked to your account, and Vietlume remembers that this device has used that account. Visits on this device while you were not signed in are counted as yours if the device is linked only to your account, so you are not counted twice. Vietlume staff accounts are not counted while signed in (browsing before signing in may be counted like anyone else's), and visits by self-identified bots are not recorded. Only the Vietlume operations team sees the figures, as totals. You can turn this off for each browser in section 07, and — from the app version that includes this switch — in the app under Me → Security (section 08).
Links you share from Vietlume carry utm_medium=share so we can tell a visit came from a shared link. It carries no name or id of yours.
… 2 unchanged blocks
07Cookies and on-device storage
… 2 unchanged blocks
Name · What it is for · How long
Cookies
vietlume_rt · Keeps you signed in. Scripts on the page cannot read this cookie (httpOnly); the browser sends it only to Vietlume's own sign-in endpoint · 30 days
vietlume_session · Tells the page this browser is signed in, so it can restore the session on reload; holds no sign-in token · 30 days
vietlume_session_hint · Shows your name and picture at the top as the page loads · 30 days
vietlume_visual_theme · The colour theme you picked · 180 days
trip_editor_prefs · Remembers how you view the trip editor (tab, compact or roomy, map) · 1 year
Language, view mode, home light/dark · Remembers display choices · 1 year
On-device storage
vietlume:anon_session_id · Random This browser's random id for usage statistics (section 06) · Until you turn statistics off or clear browser data
vietlume:analytics_visit · The current statistics visit: its id, when it was last active and where you came from · Until the tab closes or you turn statistics off
vietlume:analytics_opt_out · Remembers that you turned statistics off in this browser · Until you turn it back on or clear browser data
vietlume.room.* · Keeps your seat in a group draw room · Until you sign out or clear browser data
vietlume.advisorMemory.v1 · Lets the suggestion assistant remember your earlier answers · Clearable in the assistant
vietlume_support · Remembers the support card was shown during this visit · Until the tab closes
vietlume_near_me · Remembers that you chose to stop, or start again, using your location on Vietlume · Until you clear browser data
vietlume_discover_window · Discover by this week, this month or next month — when you are not signed in · Until you clear browser data
vietlume_studio_seen_level · Remembers the Studio tier you were congratulated on, so it is not shown again · Until you clear browser data
vietlume_lodging_draft, vietlume_lodging_after_* · Your stay declaration draft (business details, rooms, prices) and the part waiting to apply once you are confirmed as owner · Until it is sent or applied, or you clear browser data
Place cache, daily draws, sound · Faster loading, small preferences · Until you clear browser data
In the app
vietlume:analytics_device_id · This install's random id for usage statistics (section 06) · Until you turn statistics off or remove the app
vietlume:analytics_visit · The current statistics visit · Until the next visit after 30 minutes, turning statistics off, or removing the app
vietlume:analytics_opt_out · Remembers that you turned statistics off in the app · Until you turn it back on or remove the app
08The mobile app
… 4 unchanged blocks
If you sign in with Apple, Vietlume receives from Apple an identifier, your email (possibly Apple’s private relay address) and your name if you choose to share it. If that email already has a Vietlume account created with a password that has never signed in with Apple, the first Apple sign-in removes the old password and signs out every device. You can set a new password under Me → Security.
… 2 unchanged blocks
The app carries no random ID counts how it is used the same way as the website (section 06): each install carries a browser does random id, and records no usage statistics.the app sends the figures through Vietlume's website so Vercel can estimate the country and province. From the app version that includes this switch, the Usage statistics switch is under Me → Security, and on the Me screen when you are not signed in; it is on by default. When you're signed in, the figures are linked to your account (section 06). Turning it off stops this device sending anything and deletes the random id. The app still does not use your device's advertising ID (above).
… 1 unchanged blocks
09How we use data
To sign you in and keep what you have saved and written. To show your public profile and comments to others (section 12). To show a Public folder you allowed in Discover on its "Gathered by travellers" shelf (section 12). Review Vietlume Studio applications and contributions, add points, set tiers and monthly ranks, credit photographers, and confirm who owns a place (sections 04, 12). To suggest places that fit your taste, from My taste and what you have saved or rated. Discover also looks at the folders you save to or edit, to tell you when a place in them comes into season or has a new story or photos, and at your trip dates to flag the seasons and festivals that fall on your trip — only you see this part. To handle reports and keep the community safe. To learn how many people use Vietlume, where they come from, on what devices, and which features are worth building on (section 06).
… 1 unchanged blocks
11Third-party services
… 1 unchanged blocks
Vercel, Render, Neon — run the website, the application server and the database, all in Singapore. For the statistics in section 06, the part of the website running on Vercel sees your IP address while passing the request on, and gives Vietlume's application server only the country and province estimated from it; the application server does not store your IP address. Cloudflare R2 — stores the photos you upload. Google — Sign in with Google, and the site's fonts: your browser loads them from Google, so Google sees your IP address. OpenFreeMap — the base map; its servers see your IP address and the area you are viewing. Expo, Apple, Google — deliver push notifications to the app: Expo receives your phone’s notification token and passes the notification on through Apple (iPhone) or Google (Android). A notification carries a place name and where to open in the app (for a group room, the room code) — never the text of a comment or another person’s name. Your browser’s push service — Google (Chrome), Mozilla (Firefox), Apple (Safari) or Microsoft (Edge), depending on your browser: delivers notifications to the browser once you turn them on. The content is encrypted before it is sent, so the service sees only the delivery address and the time. Sentry — receives error reports when the site or app breaks: the error message, the failing code, your browser or device type, operating system, app version and the page path (without anything after a ?). Never your name, email, what you wrote or cookies. Sentry sees your IP address when it receives a report but does not store it; it keeps only the country and city estimated from it.
… 1 unchanged blocks
13How long we keep data
… 7 unchanged blocks
Vietlume does not yet clean up some old data automatically — expired group rooms, usage statistics. the Recommendations log, the old-style action counts. We are working on it and will state exact periods here when it is done. The new usage statistics already have a set period, below.
Usage statistics (section 06): each visit, with the screens and features in it, is kept 90 days and then deleted — once that day's figures have been added up; if adding up is missed, the data is kept until it is done. The record of which device has used which account is also deleted 90 days after it was last used, and may likewise stay longer if adding up is missed. The daily and monthly totals (how many visits and people by source, device, screen and feature) contain no device id or account and are kept long term. The old-style action counts (filtering by vibe, searching an area, with the city and district) are no longer recorded; what already exists is deleted with your account and will be deleted for good when the old table is removed.
15Your rights
See and edit your profile, My taste and your password — under Account.
Delete comments, ratings, votes, folders, saved places and trips — right where you created them.
Hide from top contributors, open or close your follow lists — in the Privacy part of your account, on the web and in the app.
Block and unblock — block from someone's profile or comment; unblock in Account → Security (web) or Me → Security (app).
Withdraw usage counting statistics on this device — the switch in section 07.
07 (website) or under Me → Security (app, from the app version that includes this switch).
Revoke location permission in your browser settings, or your phone’s settings for the app.
Turn off notifications kind by kind under Account → Notifications on the site or Me → Notifications in the app; entirely in your browser’s or phone’s settings.
Get a copy of your data and delete your account — under Account → Security (web) or Me (app): one JSON file with everything we keep about you — including usage statistics: each visit linked to you, with its screens and features and when each happened (including visits while not signed in on a device linked only to your account), and the list of devices that have used the account — and a delete-account button.
16Deleting your account
… 3 unchanged blocks
Your usage statistics are deleted at once too: visits while you were signed in, every visit while not signed in on any device that has ever used your account (including a device shared with someone else), and the record of which devices used the account. Anonymous visits on devices that never used your account cannot be linked to you and stay like any other anonymous visit.