Privacy Policy

Last updated: September 25, 2026

This policy explains how VIF collects, uses, retains and protects personal information in connection with the use of its website, application and event-related services.

VIF is operated by Abel Boris.

1. Person in charge of the protection of personal information

The person in charge of the protection of personal information for VIF is:

Any question, access request, correction request or complaint concerning personal information may be sent to this email address.

2. Information VIF may collect

Organizer account

When an organizer creates an account, VIF may collect, in particular:

• first name;
• email address;
• information required for authentication;
• the account creation and update dates;
• the account status.

Passwords are not stored in plain text. VIF stores a cryptographic hash of the password.

Event information

When creating and managing an event, VIF may retain, in particular:

• the event name and type;
• the event date;
• the names of persons being celebrated, when provided;
• the expected number of participants;
• the preferences and options selected for the event;
• the unique code associated with the event;
• dates and information related to the event lifecycle.

Participants

When a person participates in a VIF event, the following information may be recorded, in particular:

• the chosen display name or nickname;
• a unique technical participant identifier;
• the participant role;
• mission progress;
• the score;
• missions completed or replaced;
• dates and times related to participation and activity.

Photos and event-related content

When this feature is used, VIF may receive and retain:

• photos uploaded by participants;
• thumbnails generated from those photos;
• technical information about the files, such as their dimensions and size;
• reactions associated with photos;
• content reports and their reasons;
• sharing cards generated by VIF.

Photos may depict individuals and may constitute personal information. The organizer must ensure that they are authorized to arrange the collection and sharing of photos in the context of the event and must adequately inform their guests.

Contract and payments

To establish and retain contractual records, send contract confirmations and track a payment, VIF may retain in particular:

• the contracting customer’s full name and postal address provided for the contract;
• the applicable amount and currency;
• the payment status and payment date, when applicable;
• the versions of the legal documents accepted and the dates associated with acceptance and delivery of the contract confirmation;
• technical identifiers provided by the payment service provider, when applicable.

Electronic payments are processed by an external payment service provider, including Stripe. VIF does not directly store the customer's complete payment card information.

Technical and security data

Certain technical information is used to ensure the operation and security of VIF.

The IP address may be used, in particular, to limit abusive login or account recovery attempts. In the internal rate-limiting mechanism used by VIF, a cryptographic hash derived from the technical information is stored instead of the raw IP address in the rate-limiting table.

Technical logs may also be generated as part of the normal operation and security of the service.

3. Why is this information used?

VIF mainly uses the information collected to:

• create and administer organizer accounts;
• create, configure and operate events;
• allow guests to participate in missions;
• calculate participant progress and rankings;
• display and manage photo galleries;
• allow participation to be resumed on a device;
• establish and retain contractual records, send contract confirmations, and process or verify payments;
• respond to support requests;
• prevent abuse, fraud and unauthorized access;
• moderate or process content reports;
• comply with applicable legal obligations.

4. Cookies and browser storage

VIF uses certain technologies necessary for the operation of its service.

Session cookie

A PHP session cookie is used, in particular, to maintain an organizer's login or a participant's active session. This cookie is configured with appropriate safeguards, including the HttpOnly attribute, Secure when the connection uses HTTPS, and SameSite=Lax.

Participant resume cookie

To allow a participant to resume their participation on the same device, VIF may create an event-specific cookie containing a unique technical identifier.

This cookie may be configured for a maximum duration of 400 days. It does not directly contain the participant's name, email address or photo.

The existence of this cookie does not extend the availability period of an event or its photos.

Browser local storage

To make it easier to resume a guest session, VIF may store the following in the browser's local storage:

• the event code;
• the participant's technical identifier;
• the date and time when the session was stored.

VIF may also store locally a preference indicating that the organizer dismissed the invitation to install the VIF web application.

This data may be deleted by the user using their browser functions. Certain session-resume features may then no longer work.

5. Access to information and disclosures

Access to information is limited to the persons and systems that need it to operate VIF.

Depending on the features selected for an event, certain information such as the nickname, score or photos may be visible to the organizer and to other participants in the same event.

VIF may also use technical service providers, including for:

• service hosting;
• payment processing;
• sending transactional emails;
• infrastructure maintenance and security.

These providers may access only the information necessary to provide their services, subject to their own contractual and legal obligations.

Certain providers may operate infrastructure located outside Quebec. In that case, information may be processed in another jurisdiction and may be subject to the laws applicable there.

VIF may also disclose information when required by law or when such disclosure is necessary to protect its rights, its users or the security of the service.

6. Retention period for photos and memories

The availability period for memories depends on the plan associated with the event.

• VIF Discovery: 7 days after the event date;
• VIF Mini: 90 days after the event date;
• VIF Event: 365 days after the event date;
• VIF PAY-AS-YOU-GO: 7 days after the end of the usage period while the event remains unpaid; after payment is confirmed, the retention period is set to 30 days from the payment date and time;
• VIF Large: 365 days after the event date;
• VIF Business: 365 days after the event date.

For the fixed-duration offers listed above, the period is calculated until 11:59:59 p.m. on the last applicable day according to the event's local time used by VIF. For VIF PAY-AS-YOU-GO, retention deadlines are precise timestamps: 7 days after the end of the usage period while the event remains unpaid, then 30 days from the payment date and time once payment is confirmed.

Once this period has expired, memories are no longer accessible in the application and expired files are handled by VIF's automated deletion process.

Other information, including information related to the account, contractual records, payments, security or service administration, may be retained for the period reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting or security obligations.

7. Security

VIF applies administrative and technical measures designed to protect personal information against unauthorized access, use, modification, disclosure or destruction.

These measures include authentication mechanisms, password hashing, access controls, session protections, limiting certain abusive attempts and restricting direct access to private files.

However, no computer system can provide an absolute guarantee of security.

8. Rights of individuals

Subject to the conditions provided by applicable laws, an individual may, in particular, request:

• access to personal information held about them;
• correction of inaccurate or incomplete information;
• information concerning the use or disclosure of their information;
• withdrawal of consent when that right applies;
• deletion or cessation of dissemination of certain information when permitted by law.

A request must sufficiently identify the person and the information concerned. Identity verification may be required before personal information is disclosed or modified.

Requests must be addressed to the person in charge of the protection of personal information at: Boristahaservices@gmail.com .

9. Privacy complaints

Any person who believes that their personal information has not been handled in accordance with this policy may submit a complaint to the person in charge of the protection of personal information.

The complaint should ideally describe the situation, the information concerned and the contact details allowing VIF to carry out the appropriate follow-up.

10. Events involving minors

Some events using VIF may include minors. The event organizer remains responsible for obtaining the necessary authorizations when participation, the taking of photos or their distribution requires them.

11. Changes to this policy

VIF may modify this policy to reflect changes to the service, its practices or applicable legal obligations.

The date of the latest update is indicated at the beginning of this page. When a significant change warrants it, VIF will take appropriate measures to inform the individuals concerned.

12. Contact us

For any question concerning this policy or the handling of personal information:

Abel Boris
Person in charge of the protection of personal information
Email: Boristahaservices@gmail.com

You may also consult our contact page, our terms of sale and use and our refund policy.