Legal
Privacy Policy
What we collect, who else sees it, and how to get it back or delete it. Short, because we collect very little.
Last updated 5 August 2026
The short version
We store your email address, whatever you put into the tools, and a subscription record. We use no advertising trackers and no third-party analytics cookies — there is no consent banner on this site because there is nothing to consent to. We do not sell your data, and we never will.
What we collect
Because you gave it to us
- Your email address and password. The password is hashed by Supabase Auth; we can't read it.
- An optional display name and accent preference, if you set them.
- Everything you create in the tools — notes, links, bookmarks, invoices, form responses, uploads and so on.
- What you send us if you email, submit a tool request, or apply to sponsor.
Because you used the service
- Aggregate page analytics via Vercel Analytics: page path, country, browser type, referrer. Cookieless, not tied to your account, and never used to build a profile.
- Operational logs from our host — request paths, status codes, timestamps and IP addresses — kept briefly so we can debug errors and stop abuse.
- Click counts on links you shorten, and view counts on pages you publish. These are your analytics, shown to you.
What we do not collect
No advertising identifiers, no cross-site tracking, no session recording, no fingerprinting, and no card details — payment data goes straight to Stripe and never touches our servers.
Why we're allowed to
Under the GDPR our lawful bases are: performance of a contract (we can't run your account without your email and your content), legitimate interests (keeping the service up, preventing abuse, counting page views in aggregate), and legal obligation (keeping invoices for tax).
Who else sees it
We use a small number of processors, each for one job:
- Supabase — database, authentication and file storage.
- Vercel — hosting, request logs and cookieless analytics.
- Stripe — payments and billing. They hold your card details, we hold a customer ID.
- Resend — transactional email, and newsletters you choose to send.
- Anthropic — only for the AI tools, and only for the text you submit to them. If you never open an AI tool, nothing is sent.
- Cloudflare — DNS and email routing for our own inbox.
That's the whole list. We don't sell data, we don't share it for advertising, and we don't hand it to anyone else unless we're legally compelled — in which case we'll tell you if we're allowed to.
Where it lives
Our processors run infrastructure in the EU and the US. Where data moves out of the EEA or UK, those transfers rely on the Standard Contractual Clauses in each provider's data processing agreement.
How long we keep it
- Account and content: until you delete it, or 30 days after you delete your account.
- Billing records: as long as tax law requires, typically several years, held by Stripe.
- Operational logs: a short rolling window, then discarded.
- Aggregate analytics: retained as counts, with nothing that identifies a person.
Your rights
You can ask us to show you your data, correct it, delete it, hand it over in a portable format, or stop a particular use of it. Most of this you can do yourself inside the app — every tool exports, and Settings deletes the account. For anything else, email hello@vibebundl.com and we'll answer within 30 days. If you're in the EEA or UK you also have the right to complain to your data protection authority.
Cookies
We set one kind of cookie: the session cookie that keeps you signed in. It is strictly necessary, so it needs no consent. Your theme choice is stored in your browser's local storage and never sent to us.
Children
VibeBundl isn't for children under 16. We don't knowingly collect their data; if you believe we have, email us and we'll delete it.
Public pages
Several tools publish to a public URL when you ask them to. Anything on one of those pages is visible to anyone with the link and may be indexed by search engines. Don't put anything there you wouldn't put on a billboard.
Changes and contact
We'll update this page as the product changes, and email account holders about anything material. Questions: hello@vibebundl.com. See also our Terms of Service.