Privacy Policy
Effective Date: August 2026 • Version 1.2
TL;DR — Our Security & Code Privacy Guarantees
- ✓Zero Code Storage: Your source code is analyzed transiently in memory and is never saved to disk or stored in any database.
- ✓No Model Training: Customer code snippets and repository contents are never used to train AI models.
- ✓Client-Side Isolation: Free snippet pre-scans run 100% locally in your browser memory.
1. Client-Side Code Snippet Isolation
When you use our free pre-scan snippet detector, all Abstract Syntax Tree (AST) heuristic analysis occurs entirely inside your browser execution sandbox. Your source code snippet is not transmitted over network channels and stays strictly in your browser memory.
2. Full Launch Audit Transient Processing
When you submit a repository for a paid Launch Audit ($5), our server-side engine clones or receives the target files in an ephemeral memory container.
The engine performs static analysis, secret redaction, and deep quality evaluation using a third-party AI provider under strict zero-retention terms. Code is used solely to generate your report, is never stored after analysis, and is never used to train any AI model.
3. Authentication & Account Data Scope
If you authenticate via Google or GitHub OAuth, we request only basic profile credentials (email address, full name, and avatar URL). This information is strictly utilized for:
- Managing account access control and session authentication.
- Delivering paid audit reports to your account dashboard.
- Verifying your 1 free rescan entitlement within 14 days of purchase.
We do not sell, rent, or trade customer contact data to third parties.
4. Payment Processing & Security
All payment transactions are handled securely by Stripe. Vibe Code Detector never stores, transmits, or has access to your full credit card numbers, CVVs, or billing address details. All payment entitlements are verified via encrypted server-side webhooks.
5. Cookies & Telemetry
We use minimal, privacy-friendly telemetry (Plausible / PostHog) to monitor aggregate site performance, feature utilization, and tool directory clicks. We do not use intrusive tracking cookies or cross-site advertising identifiers.