Public website
IONOS
European provider- Observed
- The public website resolved to 212.132.108.41 on the IONOS network (AS8560). This identifies public website delivery, not the location of every workload or backup.
Scope verdict
Ownership reviewed, controller unresolved
The project story says Ben created Vennjoy in Brussels, Belgium. Its legal notice lists Estonian registry code 14717109, which belongs to Xolo Go OÜ. This does not establish Vennjoy’s own legal seat or ultimate owner. Belgian origin is documented; headquarters and ownership remain unverified.
Vennjoy is a social network in beta for discovering and sharing films, series, books, games, artists, activities and concerts. Members can save favourites, follow profiles and post short updates with attached discoveries. Standard posts allow 280 characters.
Private conversations and circles help members discuss shared interests and plan outings. Circles support up to 12 members. The interface is available in French, English, Dutch, German, Spanish, Italian and Portuguese. It covers interest-based sharing associated with X and Facebook; private messages are not end-to-end encrypted.
Pricing
Registration and social features are free. Paid Vennjoy subscriptions are not currently enabled; purchases and bookings with external partners are separate.
Data and operations
Infrastructure and email path
Verified operational dependencies, shown separately from ownership and from the service's core data hosting.
Incoming business email
ada.casa
Provider control not verified- Observed
- MX 0 srv.ada.casa
- Evidence
- Current daily MX lookup ↗
Authorised outbound email
Direct or undisclosed mail senders
Provider control not verified- Observed
- SPF v=spf1 ip4:212.132.108.41 ~all authorizes the observed website IP to send mail. This is authorization, not proof of every transactional message route or storage location.
- Evidence
- Live SPF record ↗
Authoritative DNS
ns1.ada.casa / ns2.ada.casa
Provider control not verified- Observed
- Authoritative NS records name ns1.ada.casa and ns2.ada.casa. The operator and control behind these custom hostnames were not established. DNS is separate from application hosting.
- Evidence
- Live authoritative NS records ↗
Core service hosting
IONOS
European provider- Observed
- The privacy policy and legal notice name IONOS as the host. They do not specify customer-data regions or the locations of databases and backups; EU-only hosting is not established.
Supporting services
TMDB
Provider control not verified- Observed
- The privacy policy says film images load from TMDB, causing the browser to contact that service. Provider control and processing locations were not established in this review.
Supporting services
Ticketmaster
Provider control not verified- Observed
- The privacy policy says event images load from Ticketmaster. This is an external image-delivery dependency; tickets are purchased separately. Provider control and processing locations were not independently reviewed.
Supporting services
Viator / Tripadvisor
Provider control not verified- Observed
- Activity images load from Viator and Tripadvisor. Destination, language, date and budget filters are sent to Viator for offers; Vennjoy says account details and circle messages are not sent. Bookings happen on the external service. Provider control and processing locations were not independently reviewed.
Supporting services
Google sign-in (when enabled)
Optional feature or channel
Non-European provider- Observed
- The privacy policy describes optional Google sign-in when enabled. Vennjoy receives an account identifier and verified email; it says it does not request contacts or retain provider access tokens. This is a conditional sign-in path, not a requirement for email registration.
Why this matters
The published disclosure lists Google sign-in (when enabled) for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.
Supporting services
Apple sign-in (when enabled)
Optional feature or channel
Non-European provider- Observed
- The privacy policy describes optional Apple sign-in when enabled. Vennjoy receives an account identifier and verified email; it says it does not request contacts or retain provider access tokens. This is a conditional sign-in path, not a requirement for email registration.
Why this matters
The published disclosure lists Apple sign-in (when enabled) for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.
Open source