Privacy Policy

• We collect only what we need to run the community: your account details, what you publish and basic technical data.
• Your profile, projects, discussions and comments are public. Your email address is never shown.
• We do not sell your personal data and we do not use advertising or analytics trackers.
• You can edit your profile at any time, delete what you have published and ask us to delete your account.

Data you give us

• Account: email address, username, display name and password. The password is stored only as a secure hash, and nobody, including us, can read it.
• Profile: avatar, bio, links to your website, GitHub and Telegram, and your preferred language.
• Content: projects (links, titles, descriptions and cover images), discussions, comments, replies, mentions and likes.
• Messages: anything you send us, such as support requests, reports or copyright complaints.

Data collected automatically

• Technical data: IP address, browser and device type (user agent), the pages you request, the date and time of requests and the referring page. This is recorded in our server logs and in your login sessions.
• Activity data: when you register, publish, comment or like, and the notifications created for you.
• Cookies: see “Cookies and local storage” below.

When you upload an avatar or a cover image, we re-encode it. This also removes hidden metadata, such as the location where a photo was taken.

• to create and maintain your account and let you log in;
• to publish your Content and show your profile;
• to notify you about likes, comments, replies and mentions;
• to send service emails, such as password reset links;
• to keep Vibe safe: to prevent spam and abuse, apply rate limits, enforce our Terms of Service and investigate security incidents;
• to understand how Vibe is used and improve it, using aggregated statistics;
• to comply with legal obligations.

If the EU or UK General Data Protection Regulation (GDPR) applies to you, we rely on these legal bases: performance of our contract with you (your account and publishing), our legitimate interests (security, moderation, running and improving community features), your consent where the law requires it, and compliance with legal obligations.

• Your profile: display name, username, avatar, bio, links, your projects and their like counts.
• Your Content: projects, discussions, comments, replies and like counts.

Public Content can be viewed by anyone, indexed by search engines, read by AI crawlers and copied by others. Before you publish something, make sure you are comfortable with it being public.

We use third-party AI providers, currently through the Vercel AI Gateway, to run some community features. Public Content, such as the titles and descriptions of publications, the text of comments and the display names of their authors, may be sent to these providers for processing. We never send your email address, password or other private account data. The providers process this data under their own terms and privacy policies.

Projects on Vibe are websites run by their authors or by third parties. When you open a project in the launcher or in a new tab, it loads directly from its own server. That server receives your IP address and browser data and may set its own cookies. Its privacy practices are not covered by this Policy, so check the project’s own policy. When a project is published or its link changes, our server checks whether the website allows embedding. This check does not send any of your data.

We use only the cookies needed for Vibe to work, and they are limited to vibe.widemade.com:

• vibe-session keeps you logged in and remembers your language. The session data is stored encrypted on our server and expires after 2 hours of inactivity.
• remember_web_… keeps you logged in on this device when “Remember me” is checked at login (it is checked by default). It is deleted when you log out.
• XSRF-TOKEN protects forms from cross-site request forgery.

Vibe can be installed as an app. For this, your browser stores the site’s static files and images in its cache so that pages load faster. We do not use advertising cookies or third-party analytics.

We do not sell or rent your personal data. We share it only:

• with service providers that help us run Vibe: hosting of our servers and database, backup storage, email delivery and the AI providers described above. They get only the data they need for their task;
• for legal reasons, when the law requires it, to respond to lawful requests from authorities, or to protect the rights, safety and property of our users, the public or Vibe;
• in a business transfer, if Vibe is merged, sold or reorganized. Your data then stays protected by this Policy.

Our servers and providers may be located outside your country, where data protection laws may differ from yours. Where the law requires it, we use appropriate safeguards for such transfers.

• Account and Content: as long as your account exists. Content you delete disappears from the site right away. When your account is deleted, your profile and all your Content are deleted with it.
• Moderated Content: Content hidden by moderators may be kept to handle complaints and disputes.
• Server logs: up to 14 days.
• Login sessions: until they expire or you log out.
• Backups: deleted data may remain in backup copies for a limited time until those copies are replaced.

All traffic to Vibe is encrypted with HTTPS. Passwords are stored as secure hashes, session data is encrypted, access to our servers and database is restricted, and login, publishing and commenting are rate limited. No system is perfectly secure, so use a unique password for Vibe and tell us right away if you notice anything suspicious.

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format and withdraw your consent. You also have the right to complain to your local data protection authority.

• Change your display name, avatar, bio, links, language and password at any time in Settings.
• Delete your projects, discussions and comments at any time.
• To delete your account, get a copy of your data or exercise any other right, email us from the address linked to your account. We may ask you to confirm your identity and will answer within 30 days.

Vibe is not intended for children under 16, and we do not knowingly collect their personal data. If you believe that a child has given us personal data, contact us and we will delete it.

We may update this Policy from time to time. The current version is always on this page, and the date at the top shows when it was last changed. We will announce significant changes on the site in advance.

Questions about this Policy or your data: Telegram t.me/widemadebot or email support@widemade.com.