Vibe Workflow
Public Knowledge Base

Privacy Policy

Last updated: January 2026

Privacy at a Glance

Vibe-Coding Workflow is designed with privacy-first principles. Your API keys are stored locally in your browser, your projects never leave your device unless you export them, and AI requests are routed through Vercel's serverless functions — your key is used for that single request and is never stored or logged.

Data We Collect

Analytics (If Enabled)

We use Supabase to collect minimal, anonymous event data:

  • Timestamp (when the event occurred)
  • Event name (e.g., page view)
  • Event type
  • Metadata (non-identifying context)

Analytics can be disabled in cookie preferences. We never track personal information or any identifying data.

Data We Never Collect

  • Your API keys (stored only in your browser)
  • Content of your AI prompts or responses
  • Your project files or generated code
  • Personal identification information
  • Payment information (we don't sell anything)

Cookies & Local Storage

We use browser localStorage to store your preferences and project data. This keeps everything on your device.

For a dedicated breakdown of analytics, consent, and advertising cookies, see our Cookie Policy.

Storage Keys We Use:

  • VIBE_GEMINI_API_KEY - Your Gemini API key
  • VIBE_OPENAI_API_KEY - Your OpenAI API key
  • VIBE_ANTHROPIC_API_KEY - Your Anthropic API key
  • VIBE_OPENROUTER_API_KEY - Your OpenRouter API key
  • VIBE_COOKIE_CONSENT - Cookie preferences
  • VIBE_PROJECTS - Your saved projects

Google AdSense & Advertising

We use Google AdSense to display advertisements on our informational pages (such as the homepage, blog, and guides). AdSense is only active on content pages and is not loaded on the application builder tool.

Google AdSense uses cookies to serve ads based on your visits to this site and other sites on the Internet. These cookies do not contain personally identifiable information. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet.

Advertising Cookies:

  • DoubleClick Cookie: Google, as a third party vendor, uses cookies to serve ads on our site. Google's use of the DART cookie enables it to serve ads to our users based on their visit to our site and other sites on the Internet.
  • Opt-out: You may opt out of the use of the DART cookie by visiting the Google ad and content network privacy policy at policies.google.com/technologies/ads.
  • Ad Personalization: You can control your ad settings and opt out of personalized advertising through Google's Ad Settings at adssettings.google.com.

We may also use third-party advertising companies to serve ads when you visit our website. These companies may use aggregated information (not including your name, address, email address or telephone number) about your visits to this and other Web sites in order to provide advertisements about goods and services of interest to you.

Third-Party Services

When you use AI features, your request is routed through a Vercel serverless function that forwards it to your chosen AI provider:

  • Vercel - Hosts our serverless functions that proxy AI requests (your API key is used in-memory for that single request and never stored or logged)
  • Google AI - generativelanguage.googleapis.com
  • OpenAI - api.openai.com
  • Anthropic - api.anthropic.com
  • OpenRouter - openrouter.ai

These services have their own privacy policies. We recommend reviewing them before using their APIs.

Your Rights

  • Access: View all your data in browser DevTools > Application > Local Storage
  • Delete: Clear all data via Settings > Data tab or clear browser storage
  • Portability: Export your projects as JSON files anytime
  • Opt-out: Disable analytics in cookie preferences

Questions?

If you have privacy questions or concerns, please contact us.