Operator policy for a parody series. Not formal legal advice.
Privacy Policy
This is an operator privacy policy for the Vibe Wheel parody series product. It is not formal legal advice. Last updated: August 24, 2026.
Who operates this
Vibe Wheel is operated by Ryan Lenk (Pittsburgh). Operator site: ryanlenk.com. Contact: hello@ryanlenk.com. There is no contact form that publishes to a public inbox on these sites.
What this covers
This policy applies to the Vibe Wheel series home at vibewheel.lol, the shared series login at auth.vibewheel.lol (when live), and episode parody apps that live on subdomains under *.vibewheel.lol (for example an episode at slug.vibewheel.lol). Together these are the “Services.”
How you sign in
Participation uses Google OAuth only. We do not run an email/password login. We do not store a password database. When you sign in with Google, we receive the basic profile fields Google returns for the scopes we request (typically a stable provider account id, display name, email, and profile image URL). OAuth client secrets live only on the series auth service - never in episode apps or browsers.
After a successful sign-in we set a session cookie on the parent domain .vibewheel.lol (HttpOnly, Secure, SameSite=Lax in production) so episode subdomains can recognize the same series identity without holding OAuth secrets. You can end the session via logout on the auth service.
What we collect
- OAuth profile basics - provider account id, name, email, and avatar URL returned by Google for sign-in.
- Session records - enough to keep you signed in across vibewheel.lol and episode subdomains (session tokens / timestamps).
- User-generated content (UGC) - text, images, votes, ads, or other posts you choose to publish on an episode. UGC is public or visible to other participants according to that episode’s product.
- Rough operational logs - IP address, user-agent, and request metadata used for security, abuse prevention, and rate limits. We do not build advertising profiles from this.
What we do not do
- We do not sell your personal data.
- We do not store passwords (there is no password store).
- We do not use your Google account to send marketing email for third parties.
- We do not claim affiliation with Alex Tew, the Million Dollar Homepage, or original advertisers.
Why we use the data
To authenticate you, keep a series-wide session, show your identity on episodes you join, host content you post, enforce house rules and series bans, apply rate limits, and keep the Services secure.
User-generated content and public posts
Content you post on an episode may be visible to other users and to the public web. Do not post personal data you are not comfortable making public. Episode apps may moderate, hide, or remove content. Gross, disgusting, or off-color uploads can get you banned - see the Terms of Participation.
Series bans
Moderation and bans key off your series identity (the account from shared login), not a disposable per-episode nickname. A ban on one episode can apply across current and future Vibe Wheel parodies.
Cookies
We use a session cookie on .vibewheel.lol for sign-in state (essential if you log in). Cloudflare and our hosting stack may set cookies or similar technical identifiers needed to deliver and protect the site. Optional anonymous presence for the museum live chip runs only after you choose Accept on the cookie banner (stored as vw_cookie_consent / vw_consent=all). Essential only keeps sign-in and technical cookies and turns presence off. Before you choose, the museum does not POST to /api/presence. We do not run a third-party ad-tech cookie farm on the museum home. See also Opt out.
Third parties
- Google - OAuth sign-in. Google’s own privacy policy applies to what Google processes when you authenticate.
- Cloudflare - DNS, CDN, Workers hosting, and related security / rate-limiting features for vibewheel.lol and related hostnames.
Episode apps may add episode-specific processors; those should be disclosed on the episode when they go beyond this series baseline.
Children’s privacy
The Services are not directed at children. You must be at least 13 years old to use them, and where the law in your region requires a higher age for online consent (commonly 16 in parts of the EU/EEA/UK), you must meet that higher age. We do not knowingly collect personal information from children under those ages. If you believe a child has signed in, contact hello@ryanlenk.com and we will delete the account/session we can identify.
Retention
Session data lasts while you stay signed in and for a limited time after logout or expiry. Account link records and UGC may persist for as long as the series or episode needs them for operation, moderation, or legal retention. You can ask us to delete account-linked data via email; public UGC already copied or indexed elsewhere may be hard to fully erase.
Anonymous presence on the museum
The museum home shows a small live chip (“X here · Y unique”). That count is anonymous: tabs open now (recent pings) plus unique browsers since the counter started. We store a hash of IP + user-agent - not a name, not a Google account. It is not a Cloudflare analytics visit count and is not used for ads. Presence POSTs require Accept (or equivalent consent=all). Essential only, presence off, or Global Privacy Control means no POST; the chip shows “presence off.”
Do Not Sell
We do not sell personal data. There is no ad network on the museum home and no sale of presence hashes, session records, or OAuth profile fields.
Global Privacy Control
If your browser sends Global Privacy Control (navigator.globalPrivacyControl or the Sec-GPC: 1 request header), we treat that as an opt-out of optional presence: consent defaults to essential only, and presence POSTs are not recorded. You may still see a one-time dismissible note explaining that.
Opt out
Use the controls below to clear this browser’s museum prefs, stop anonymous presence, or delete this browser’s hashed presence row from the museum counter. For Google account / series session deletion, email hello@ryanlenk.com with subject “Vibe Wheel privacy opt-out”, or sign out at auth.vibewheel.lol/logout.
This browser. Clear this browser wipes museum vw_* localStorage keys and the vw_consent cookie so the banner returns. It does not delete other visitors or your Google account.
Anonymous presence. Essential only (or presence off) stops the live chip from posting to /api/presence. You can also delete this browser's hashed row from the museum D1 visitors table.
Account / series data. Sign out at auth.vibewheel.lol/logout. For Google account session deletion, email hello@ryanlenk.com with subject "Vibe Wheel privacy opt-out".
Contact
Privacy questions: hello@ryanlenk.com. Operator: Ryan Lenk · ryanlenk.com.
Changes
We may update this policy as the series grows. Material changes will be reflected on this page with an updated date. Continued use of the Services after a change means you accept the revised policy.
Parody disclaimer
Vibe Wheel is a parody. It is not affiliated with Alex Tew, the Million Dollar Homepage, milliondollarhomepage.com, or any original advertiser. Original 2005 ads are cited for commentary and parody. This privacy page is an operator policy for a parody series product - not formal legal advice.