Ghayb Home
EN

The German version is legally binding. German version →

Privacy policy

Last updated: 14 October 2026. The controller under the GDPR is the service provider named in the legal notice.

What data we process

Meta Pixel — only with your consent

We would like to measure whether our advertising on Instagram and Facebook reaches people. For this we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. It is only loaded once you choose “Accept” in the notice at the bottom of the page. Without your consent, nothing is sent to Meta.

With your consent, Meta sets a cookie and receives which of our pages you visit, whether you open the checkout and whether an order was completed (with amount and model), along with your IP address and details about your browser and device. Meta may link this data to your Meta account and transfer it to the USA (EU-US Data Privacy Framework). We and Meta are joint controllers for the collection and transmission to Meta (Art. 26 GDPR); the agreement is available at facebook.com/legal/controller_addendum. Meta alone is responsible for any further processing (facebook.com/privacy/policy).

If an order is placed, our server additionally reports the purchase to Meta — the amount and your email address, the latter only in hashed form (SHA-256), so that Meta can match the purchase to the click without receiving the address in plain text. This too happens only with your consent: without it, the server reports nothing.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) Austrian Telecommunications Act 2021). If you say no, the site works in full — you can order just the same. You may withdraw your consent at any time with effect for the future:

Apart from this, this site sets no analytics or advertising cookies. With your consent, Meta sets the cookies _fbp and _fbc (up to 90 days); if you withdraw, we delete them (for Trybe’s cookies, see the next section). Your browser’s local storage also holds: your language choice (ghayb-sprache), your answer to this notice with its timestamp (ghayb-einwilligung, 12 months, after which we ask again), a note of which channel brought you to us (ghayb-herkunft, 30 days — only with your consent), and after an order a marker so the same purchase is not counted twice (ghayb-kauf-…). We pass the channel on to our checkout when you order, so that we know which one brought it; the other entries stay on your device.

Trybe — crediting creators, only with your consent

Creators present Ghayb Home in their own videos and receive a fixed amount for every sale their link brings. To know whom a purchase is owed to, we use the pixel of the Trybe platform (jointrybe.com). It depends on the same consent as the Meta pixel: without your “Accept” it is not loaded and nothing is sent to Trybe.

With your consent, Trybe receives through our address track.ghayb-home.com which of our pages you visit, whether you open the checkout and whether an order was completed (amount and order reference, no email address), as well as the creator link you came through, the previous page, your IP address and details of your browser and device. For this Trybe sets the cookie ugc_vid_… (a random visitor ID, up to 12 months) and stores ugc_session in your browser for the duration of the visit; if you withdraw, we delete both. The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021); you can withdraw it with the same “Change consent” button above.

Independently of this: if you arrive through a creator’s link (?trybe=… in the address) and order during the same visit, we store that creator’s ID with your order in our own order data (at our payment provider Stripe). Nothing is stored on your device for this, and without your consent none of it goes to Trybe. This lets us pay the creator their commission. The legal basis is our legitimate interest in settling commissions correctly (Art. 6(1)(f) GDPR); it is kept as long as the rest of the order data.

Our own creator programme

Alongside the programme run through Trybe we operate a second one of our own: creators apply to us directly and receive a fixed amount for every sale their link brings. This programme runs entirely on our own systems — no advertising platform is involved here, no pixel is loaded, and nothing leaves the house. Which of the two programmes a creator uses you can tell from the link: ?trybe=… belongs to the Trybe programme in the section above, ?ref=… to this one.

If you arrive through a creator link. The address then carries ?ref= and a short code for that creator. We append this code to the site's internal links as you click, so that it travels with you as far as the checkout — nothing is stored on your device in the process, and it is gone when you leave the site. The basis is our legitimate interest in knowing whom we owe a sale to (Art. 6(1)(f) GDPR). Only with your consent do we additionally keep the code for 30 days in your browser's local storage (in the same ghayb-herkunft entry as the channel), so that a later purchase is still credited; without your “Accept” this does not happen. When a creator link is opened we also increase a counter for that code by one — no cookie, no identifier, no storing of your IP address; nothing arises there that could be linked to you. If you order, the code goes into your order data so we can attribute and settle the commission (Art. 6(1)(b) and (f) GDPR). The creator never learns who bought: they see the date, the variant, the amount and the status of their commission — no name, no address, no email address.

If you apply as a creator. We process your name, email address, profile link, language and your message in order to decide on the application and to answer you (Art. 6(1)(b) GDPR, pre-contractual). We also ask how you invoice — as a private person, a small business or a VAT-registered business — because that determines which document you receive and what is transferred to you.

If we take you on, your creator code, your sales and, for the payout, account holder, IBAN and where applicable BIC are added (Art. 6(1)(b) GDPR). If you are a VAT-registered business, your address and your VAT ID or tax number are added as well. We need those two not because we want them but because the law requires them: we settle your commission by credit note, and on a credit note the name, the address and — in the reverse-charge case — the tax number of the supplier are mandatory details (§ 11 Austrian VAT Act). The legal basis is therefore Art. 6(1)(c) GDPR (legal obligation) together with the VAT Act. From private persons and small businesses we do not collect an address or a tax number — there the document has no tax effect, so we do not need them.

Only you and we see the payout details; emails and logs carry at most the last four digits of the IBAN. A rejection is deleted after twelve months. When your participation ends we delete your account after the final payout, unless a tax retention duty stands in the way — credit notes and payment receipts we have issued, together with the details shown on them, are kept for seven years from the end of the calendar year (§ 132 Austrian Federal Fiscal Code).

The sign-in cookie. When you sign in to your creator account we set the cookie ghayb_aff (30 days, HttpOnly, HTTPS only). It holds nothing but a random identifier for your session and serves only to keep you signed in. It is therefore strictly necessary and needs no consent (§ 165(3) TKG 2021); we name it here all the same. The sign-in link we email you is stored on our side only as a checksum, is valid for 15 minutes and works exactly once.

The programme's data is held encrypted with our hosting provider in the EU; the emails are sent by our email provider. Payment for purchases runs through Stripe as it does otherwise.

Independently of this: if you arrive through a creator’s link (?trybe=… in the address) and order during the same visit, we store that creator’s ID with your order in our own order data (at our payment provider Stripe). Nothing is stored on your device for this, and without your consent none of it goes to Trybe. This lets us pay the creator their commission. The legal basis is our legitimate interest in settling commissions correctly (Art. 6(1)(f) GDPR); it is kept as long as the rest of the order data.

News, offers and the request for a review — only with your consent

At checkout you can tick a box: news and offers from Ghayb, by e-mail and on your Ghayb station. The box is not pre-ticked, and your order goes through just the same without it — the legal basis is your consent alone (Art. 6(1)(a) GDPR, § 174 Austrian Telecommunications Act 2021).

The same tick box covers a second thing, which we name there explicitly: after delivery you will be asked once to review Ghayb Home. That invitation is sent by Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark on our behalf. Trustpilot receives your name, your e-mail address and the order number for this — not your postal address and not your payment data. Its seat is in the EU, so no transfer to a third country is needed. Without your tick you receive no such invitation. You then write the review at Trustpilot, under their own privacy policy; we can neither write it nor delete it.

For this we store your e-mail address, the time of your answer and the wording you agreed to — otherwise we could not prove the consent (Art. 7(1) GDPR). You may withdraw at any time: via the link in every e-mail, in the station’s settings, or with a message to us. After that you only receive what belongs to your order.

Disclosure

Your data is not sold. It is passed on only to service providers we need in order to fulfil your order — and only to the extent required:

Transfer to the USA

Some service providers (hosting, e-mail delivery, AI features, Meta) also process data in the USA. There is no level of protection there equivalent to the GDPR, and authorities may have broader rights of access. The basis is the EU-US Data Privacy Framework where the provider is certified, otherwise the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

The device

This statement concerns the website and the Ghayb station. What you enter on a Ghayb station yourself — your own duʿāʾ, notes or reminders, for instance — stays on your device. We do not transmit it, do not store it and cannot view it.

The AI features are the exception. Voice recordings and questions put to the AI features are transmitted to our server and to a specialised AI service provider so they can be answered, partly in the USA. Recordings are not stored. The legal basis is performance of the contract covering these features (Art. 6(1)(b) GDPR); the AI features can be switched off individually on the device.

Ghayb station: feedback

When you send feedback from your Ghayb station, we transmit your rating (1–5 stars), the wishes you selected, your text, the language set on the device, the software version and the station’s pairing code. We only transmit an e-mail address if you enter one yourself; we use it solely to ask you about this feedback. The purpose is improving our product and handling your request (Art. 6(1)(f) GDPR; for the voluntary e-mail address Art. 6(1)(a) GDPR). Transmission is encrypted, via our hosting provider; delivery to our support mailbox via an e-mail service provider based in the USA. We delete feedback after 24 months unless it is needed for an ongoing request.

Ghayb station: offers and news

We only show offers and news on your station if you have consented — at checkout via the corresponding box, or on the station itself (Settings → Device → Offers). At most two per month, marked as “Offer from Ghayb”, never at prayer times and never at night. The legal basis is your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time with effect for the future: with a switch on the station, via the unsubscribe link in our e-mails, or by message to support@gybai.net (Art. 7(3) GDPR). To ask whether you consented, the station transmits its device identifier and its pairing code once a day. We do not evaluate how you use the station for this. The state of your consent is stored with your order at our payment provider Stripe Payments Europe, Limited.

Ghayb station: linking it to your order

So that we can provide updates, support and warranty service, we link your station to your order via its device identifier and pairing code, and we store which software version it runs and when it was last online (Art. 6(1)(b) GDPR). We keep this data for the duration of the warranty, and beyond that only as long as statutory retention obligations require.

Storage period

We keep enquiries for as long as they are needed for processing, then within statutory retention periods (seven years under Austrian tax law).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. A message to office@gybai.net is enough. You can also lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

← Back to the home page