This Privacy Policy describes how BOLD BYTES DEV LLC ("we", "us", "our"), a Florida limited liability company, collects, uses, and protects information when you use vibelevel.xyz (the "Service"). By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.
Information we collect
- Your public GitHub profile data (username, avatar, repositories, commit history) when you run a vibe check
- GitHub OAuth token if you choose to log in — used solely to access the GitHub API on your behalf
- Google account information (email, name, profile picture) if you log in via Google for Lovable vibe checks — used to identify your account
- IP address for rate limiting purposes (stored temporarily, automatically deleted after 60 seconds)
- Session data stored via Cloudflare KV if you log in
- Basic usage analytics via PostHog (page views, page leaves, scroll depth) — no session recordings, no personally identifiable information collected
Information we do not collect
- We do not store emails, names, or personal details beyond your active session
- We do not use cookies except the session cookie required for authentication
- We do not sell, rent, or share your data with third parties
How we use your information
- To compute your vibe score from publicly available GitHub data
- To cache results in Cloudflare KV for up to 1 hour to reduce API calls
- To display leaderboards and aggregate statistics
- To generate AI-powered vibe descriptions using Cloudflare Workers AI
- To analyze usage patterns and improve the Service
Third-party services
The Service relies on the following third-party providers, each subject to their own privacy policies:
- Cloudflare — hosting, KV storage, Workers AI, DNS
- GitHub — API access and OAuth authentication
- Google — OAuth authentication for Lovable vibe checks
- PostHog — privacy-friendly product analytics
- Google Fonts — font delivery (JetBrains Mono, Material Symbols)
Data retention
Cached vibe results expire after 1 hour. Rate limit keys expire after 60 seconds. Session data persists until you log out or the session expires. We do not maintain long-term data storage beyond these cache durations.
Children's privacy
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.
Your rights
You may log out at any time to clear your session. Since we primarily process publicly available GitHub data, there is generally no private data to delete. Cached vibe results expire automatically. If you have questions about your data, please contact us.
Changes to this policy
We may update this Privacy Policy from time to time. Changes become effective immediately upon posting to this page. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
Contact
BOLD BYTES DEV LLC — Florida, USA
Questions or concerns? Open an issue on GitHub.