Privacy Policy

Last updated: October 11, 2026.

Vibe-Code Audit (vibe-audit-efkm.onrender.com) is operated by Ingenious AI, Orange Walk Town, Belize. Contact: avilanatanael640@gmail.com.

This policy explains what data we collect when you use Vibe-Code Audit, why we collect it, and what choices you have. We collect what the service needs to function and nothing more.

What we collect

• Account data: the email address you sign up with, plus a salted hash of your password. We never see or store plain-text passwords.
• Content you submit: code snippets, project files and URLs you submit for security scans, and the reports generated from them.
• Operational records: scan history, report links and license-key status tied to your account, so your dashboard stays accurate.
• Technical data: IP address, browser type and pages visited, in standard server logs used for security and abuse prevention.

A note on secrets: the scanner looks for exposed API keys and credentials in code you submit so it can warn you about them. We do not extract, store or transmit your secrets anywhere except inside the scan report shown to you. You should still rotate any secret you paste into any online tool, including this one.

Cookies

We use strictly-necessary cookies to keep you signed in, and a consent cookie (cookie_consent) that remembers the cookie choices you make in our banner — both are required for the site to work. With your permission, chosen in the cookie banner on your first visit, we also use analytics cookies to understand which pages are useful, and marketing cookies for advertising and measuring ad performance. If you decline, no analytics or marketing cookies run at all. You can change your choices at any time with the cookie button at the bottom-left of any page, or by clearing cookies in your browser (blocking the session cookie will sign you out).

Advertising

We may display ads served by Google AdSense to support the free tier. As of the date above, no advertising is served on this site. If that changes, Google — as a third-party vendor — may use cookies, including the DoubleClick cookie, to serve ads based on your visits to this and other sites. You can opt out of personalized advertising at Google's Ads Settings page, and you can block advertising cookies entirely in your browser settings without breaking the core service (sign-in aside, which needs the session cookie).

How we use your data

To operate the service (accounts, scans, reports), to prevent abuse and fraud, and to improve reliability. We never sell your personal data, and we never share it with advertisers or data brokers.

Third parties

• Hosting: Render (application hosting).
• Database: Neon Postgres.
• Dependency verification: package names from your code are checked live against the public npm and PyPI registries to detect hallucinated or typosquat packages — no account data is sent.
• Payments: card payments are handled by our payments provider when enabled — card data never touches our servers.
• Advertising (if enabled in future): Google AdSense — see the Advertising section above.

Data retention

Account data is kept while your account is active. Scans and reports are retained so you can revisit them; delete your account and we delete the associated records within 30 days. Server logs are rotated on a short cycle and are not used for profiling.

Children

Vibe-Code Audit is a professional developer tool and is not directed at children under 13. We do not knowingly collect data from children.

Your rights

Email avilanatanael640@gmail.com to access, correct, export or delete your personal data, or to withdraw consent where it applies. We respond to every request.

Changes to this policy

If we change this policy in a material way (for example, when advertising goes live), we will update the date at the top of this page. Continued use of the service after changes take effect means you accept the updated policy.