Privacy Policy

This Privacy Policy applies to information we collect when you create an account, visit our site, use the Service, communicate with us, or otherwise interact with Vibecade. It does not apply to third-party websites, services, or tools that we do not control, even if they are linked from or integrated with the Service.

Vibecade is operated by Virality Labs, LLC.. If you have privacy questions or want to submit a rights request, you can contact us at vibecadeai@gmail.com.

We collect information from several sources, depending on how you use the Service.

• Account and profile information. When you sign up or use account features, we receive information such as your name, username, email address, profile image, authentication identifiers, and account settings from you and our authentication providers.
• Project and content information. We collect prompts, chat history, source files, builds, image attachments, thumbnails, project metadata, exported files, published game data, and other content you submit, generate, store, or make available through the Service.
• Public profile and game information. If you publish a game or keep a project public, information such as your username, game title, prompt snippets, model name, thumbnails, timestamps, and playable or remixable public builds may be visible to others through Vibecade.
• Billing and transaction information. If you purchase paid features, we receive billing identity, subscription state, credit balance, transaction status, and related records from our billing and payment providers. We do not store full payment-card numbers ourselves.
• Usage, device, and log information. We and our service providers automatically receive technical information such as IP address, approximate location derived from IP, browser and device details, request metadata, error logs, performance information, sandbox and workflow events, and abuse-prevention signals.
• Browser-side storage and cookies. We use cookies, local storage, and session storage to remember settings, keep track of in-progress chat or project state, persist interface layout choices, and store dismissals or similar product preferences.
• Voice input. If you use voice input, your browser may process speech through the Web Speech API or a browser-provided speech-recognition service so the transcript can be inserted into the chat composer.
• Communications. If you email us or otherwise contact us, we collect the contents of those communications and any information you choose to provide.

We use information we collect to operate and improve Vibecade, including to:

• Provide, maintain, support, and secure the Service.
• Authenticate users and manage accounts, projects, exports, and publishing.
• Process prompts, files, images, and related context through AI, sandbox, build, hosting, and workflow systems in order to generate, edit, test, publish, and serve projects.
• Detect, investigate, and prevent fraud, abuse, security incidents, and technical issues.
• Debug, monitor, analyze, improve, and train Vibecade-related systems, models, features, and safety mechanisms.
• Process purchases, manage subscriptions, measure usage, and enforce plan limits.
• Respond to support requests and communicate with you about the Service.
• Comply with law, enforce our terms, and protect our rights and users.

Vibecade relies on third-party providers to operate core product features. For example, we use providers for authentication, database and file storage, billing and payments, hosting, telemetry, anti-abuse protection, sandbox execution, workflow orchestration, and artificial intelligence processing.

When you use AI-powered features, we may send prompts, files, images, attachments, chat context, and related project data to Vercel AI Gateway and to model providers selected by the feature or model you choose, such as OpenAI, Anthropic, Google, xAI, Moonshot AI, MiniMax, and ZAI. We may also process your data through Vercel-hosted sandboxes and workflows, Supabase, Clerk, Autumn, Stripe or another payment processor used by Autumn, Langfuse, BotID, and related infrastructure providers.

We may use prompts, files, outputs, and usage data to operate, secure, debug, support, improve, and train Vibecade-related systems. We do not describe this as a sale or license of your personal information or as a standalone commercialization of anonymized datasets to outside labs.

Projects may be public by default unless you change visibility or have access to private-project features. Public projects and published games can be displayed, played, shared, promoted, indexed inside Vibecade, and remixed by other Vibecade users as part of the product.

If you keep a project private, we do not intentionally display it publicly. Private projects are still processed by us and our service providers as needed to operate the Service, including storage, AI processing, sandbox execution, build and export handling, security review, moderation, support, and legal compliance.

We use browser storage technologies to support core product functionality. This includes cookies used to remember layout sizing or banner dismissals, local storage used for settings such as model and feature preferences, and session storage used for in-progress chat or project state and reconnect behavior.

You can manage or clear many of these technologies through your browser settings, though doing so may reset preferences, interfere with active sessions, or remove saved UI state. We do not currently provide a separate cookie-management center.

If you purchase subscriptions, credits, or other paid features, our billing providers process payment and subscription administration on our behalf. We may receive information such as customer identifiers, subscription status, product entitlements, credit balances, transaction confirmations, billing-country data, and limited payment metadata needed for accounting, fraud prevention, taxes, and customer support.

Full payment-card details are handled by payment processors, not stored directly by Vibecade.

We retain information for as long as reasonably necessary to provide the Service, maintain your account, operate public game pages, meet legal or tax obligations, resolve disputes, enforce our agreements, and protect the Service.

Retention periods vary by data type and context. For example, project data, public game metadata, logs, billing records, and support communications may be retained for different periods. Deleted projects may persist for a limited time in backups, logs, caches, or provider systems before being removed on normal retention cycles.

We use administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No system is completely secure, and we cannot guarantee absolute security.

Vibecade and our service providers may process information in the United States and other countries where privacy laws may differ from those in your jurisdiction. By using the Service, you understand that your information may be transferred to and processed in those locations.

Depending on where you live, you may have rights to access, correct, delete, or object to certain processing of your information.

• Project controls. You can manage project visibility and delete projects through the product.
• Browser controls. You can clear or block cookies, local storage, and session storage through your browser settings, subject to the product limitations described above.
• Privacy requests. To request access, correction, deletion, or another applicable privacy right, email us at vibecadeai@gmail.com. We may need to verify your identity before acting on a request. We will respond within the time required by applicable law and generally aim to do so within 30 days where practical.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Please do not submit sensitive regulated data to the Service, including health data, payment-card data, bank-account data, government identification numbers, or other high-risk personal data unless we clearly state that we support that use.

The Service is not directed to children under 13, or the minimum age required by local law, and we do not knowingly collect personal information from children in violation of applicable law.

We may update this Privacy Policy from time to time. If we make material changes, we may post the updated version on the Service, update the “Last updated” date above, and take any additional steps required by applicable law.

If you have questions about this Privacy Policy or our privacy practices, contact Virality Labs, LLC. at vibecadeai@gmail.com.