1. Who we are

Vibe to Dev (vibetodev.com) is responsible for the personal data described here. Contact: support@vibetodev.com.

2. What we collect

Account: when you create an account with email and password, or sign in with Google, we receive your email address, a user ID and, with Google, your name, through Firebase Authentication. Firebase stores your password; we never see it. We use the email to check your access.

Learning progress: which lessons and topics you have opened or finished, and when. It is stored against your user ID.

Purchases: which course you bought, when, and the Paddle transaction ID. Your card details, billing address and invoices are handled by Paddle, not by us; we never see or store your card.

Update list and free downloads: if you leave your email to hear about new free resources or unlock the free Claude skills page (/claude-skills), we store the address, where you signed up, whether you also agreed to receive offers about our courses, and whether you later signed in to the course.

Website scanner quota: when you run the free website scanner while signed in, we store a daily scan count against your user ID (scan_usage) to enforce the daily limit. We do not store the URLs you scan or the scan report.

Technical data and page speed: our host (Vercel) keeps standard server logs (such as IP address, browser and pages requested) for security and debugging, and collects anonymous Web Vitals page-speed timings (Vercel Speed Insights).

We don't collect your API keys, passwords, or the apps and code you build with the course. Don't send them to us.

3. Why we use it

To provide the course: sign-in, access to what you bought, and saving your progress across devices (performing our contract with you).

To handle payments, refunds and tax records (contract and legal obligations).

To keep the site secure and working (our legitimate interest).

To send one welcome email when you sign up, and to answer you when you write to us. We don't send marketing email without asking you first.

To email the update list about new free resources (your consent). Offers about our courses go only to people who ticked that box. Email support@vibetodev.com to change your choice or be removed.

4. Who we share it with

Only the service providers that run the site, each for its own part: Google Firebase (sign-in), Neon (database for progress, purchases and the update list), Vercel (hosting and logs), Resend (sending our emails) and Paddle (payments, as merchant of record under its own privacy policy).

Some of them store data outside your country, including in the United States, under their standard data-protection terms. We don't sell or rent personal data, and we don't share it for advertising.

We may disclose data if the law requires it.

5. Cookies and local storage

__session: keeps you signed in, for up to 5 days. Strictly necessary.

vibe.lang: remembers your language, for up to 1 year. Strictly necessary.

vibe.skills: remembers that you unlocked the free Claude skills page (/claude-skills), for up to 1 year. Strictly necessary.

vibe.tldr: remembers your full or short reading mode preference in lessons, for up to 1 year. Strictly necessary.

vibe.reviewer: set only when you open a reviewer link, for up to 30 days, so the lessons open without an account. Strictly necessary.

Your browser's local storage keeps interface choices (like a folded menu or hidden finished lessons) and build-step ticks. That stays on your device.

There are no advertising or third-party tracking cookies, so there is no cookie banner. Vercel Speed Insights measures anonymous page-load performance without cookies. When you open checkout, Paddle's script loads on our courses page to show the payment window, and Paddle sets its own cookies there.

6. How long we keep it

Account, progress and purchase records: while your account exists. Ask us to delete it and we will, within 30 days. We keep a purchase record for as long as tax and accounting law requires.

Server logs are kept for a short period by our host and then deleted.

7. Your rights

You can ask to see the data we hold about you, correct it, get a copy, or delete it, and you can object to or restrict how we use it. Email support@vibetodev.com from the address you sign in with; we reply within 30 days.

You can also complain to your data-protection authority; in Israel that is the Privacy Protection Authority, in the EU or UK your local supervisory authority.

8. Security and children

Data travels over HTTPS, access to our systems is limited, and sign-in is handled by Google, so we never hold your password. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

The course is not meant for children under 16, and we don't knowingly collect their data.

9. Changes

If we change what we collect or how we use it, we update this page and the date above. For a significant change we will also tell signed-in users.