This Privacy Policy describes how BOLD BYTES DEV LLC ("we", "us", "our"), a Florida limited liability company, collects, uses, and protects information when you use vibelevel.xyz (the "Service"). By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.
Information we collect
- Your public GitHub profile data (username, avatar, repositories, commit history) when you run a vibe check
- GitHub OAuth token if you choose to log in — used solely to access the GitHub API on your behalf
- Google account information (email, name, profile picture) if you log in via Google for Lovable vibe checks — used to identify your account
- IP address for rate limiting purposes (stored temporarily, automatically deleted after 60 seconds)
- Session data stored via Cloudflare KV if you log in
- Basic usage analytics via PostHog (page views, page leaves, scroll depth) — no session recordings
- Order details if you order an External Exposure Report: your name, email, business name, billing address, the website to be checked, your IP address and the time of the order — stored to fulfil the order, send the report and invoice, and keep the business records we are legally required to keep
- If you start the order form, enter your email and do not submit it, we keep what you typed (website, email, name, business name) in Cloudflare KV for up to 7 days to send you a single reminder with a link to finish the order; it is then deleted automatically
Information we do not collect
- We do not store emails, names, or personal details beyond your active session, except the details you enter when placing an order
- We do not use cookies except the session cookie required for authentication and Google Ads conversion cookies that only tell us whether a Google ad led to an order
- We do not sell or rent your data. We share it only with the service providers listed below, and only to run the Service and fulfil your order
How we use your information
- To compute your vibe score from publicly available GitHub data
- To cache results in Cloudflare KV for up to 1 hour to reduce API calls
- To display leaderboards and aggregate statistics
- To generate AI-powered vibe descriptions using Cloudflare Workers AI
- To analyze usage patterns and improve the Service
Third-party services
The Service relies on the following third-party providers, each subject to their own privacy policies:
- Cloudflare — hosting, KV storage, Workers AI, DNS
- GitHub — API access and OAuth authentication
- Google — OAuth authentication for Lovable vibe checks
- PostHog — privacy-friendly product analytics; also keeps a backup copy of orders
- Lettermint — sends order confirmations and delivery emails
- Google Ads — conversion measurement (no remarketing, no ad personalisation)
- Google Fonts — font delivery (JetBrains Mono, Material Symbols)
Data retention
Cached vibe results expire after 1 hour. Rate limit keys expire after 60 seconds. Session data persists until you log out or the session expires. Order records, including the report we produce for you, are kept for as long as accounting and tax law requires, then deleted.
Children's privacy
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.
Your rights
You may log out at any time to clear your session. Since we primarily process publicly available GitHub data, there is generally no private data to delete. Cached vibe results expire automatically. If you placed an order, you can ask us at any time what we hold about you, have it corrected, or have it deleted once we no longer need it for legal record-keeping. If you have questions about your data, please contact us.
Changes to this policy
We may update this Privacy Policy from time to time. Changes become effective immediately upon posting to this page. Your continued use of the Service after any changes constitutes acceptance of the updated policy.