Privacy Policy

VibePing ("we", "us", "our") operates the vibeping.dev website and the VibePing analytics service. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. What We Collect

Analytics data (via the VibePing SDK)

When a website owner installs our JavaScript snippet, the SDK collects the following from their visitors:

• Page URLs and referrer URLs
• Screen size and viewport dimensions
• Browser name and version (from the User-Agent string)
• JavaScript errors and stack traces
• Web Vitals performance metrics (LCP, CLS, FID, INP, TTFB)
• Custom events sent by the site owner

What we do NOT collect

• IP addresses — we do not store visitor IP addresses
• Cookies — VibePing does not set any cookies
• Fingerprinting or cross-site tracking — we do not use any form of device fingerprinting
• Personally identifiable information (PII) — no names, emails, or other PII is collected by default

Account data

When you create a VibePing account, we collect your email address and, optionally, your name. This is used solely for authentication and service communication.

2. How We Use Your Data

• To provide analytics dashboards and error tracking to site owners
• To monitor uptime and performance of tracked websites
• To send transactional emails (alerts, onboarding, account updates)
• To improve and maintain the VibePing service
• To process payments for paid plans

3. Data Storage & Security

Analytics data is stored in Supabase (PostgreSQL). Depending on your project settings, data may be stored in EU or US regions.

We use industry-standard security measures including encryption in transit (TLS) and at rest. Access to production data is restricted to essential personnel only.

4. Third-Party Services

We use the following third-party services to operate VibePing:

• Vercel — website and application hosting
• Supabase — database and authentication
• Resend — transactional email delivery
• Stripe — payment processing
• Cloudflare — DNS management and email routing

Each of these providers has their own privacy policies. We only share the minimum data necessary for each service to function.

5. Cookies

VibePing does not use cookies. Our analytics SDK operates without cookies, local storage, or any client-side persistence mechanism. Because we do not use cookies or collect PII, no cookie consent banner is required under GDPR or ePrivacy regulations.

6. GDPR Compliance

VibePing is designed to be GDPR-compliant by default. Since we do not collect personally identifiable information, set cookies, or perform cross-site tracking, our analytics can typically be used without requiring a consent banner.

If you are a site owner using custom events that may include personal data, you are responsible for obtaining appropriate consent from your users.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Object to or restrict processing of your data

To exercise any of these rights, contact us at hello@vibeping.dev.

8. Data Retention

Analytics data is retained according to your plan's data retention period. Account data is retained for as long as your account is active. When you delete your account, all associated data is permanently removed within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of any material changes via email at least 30 days before they take effect. The latest version will always be available at this page.

10. Contact

If you have questions about this Privacy Policy, contact us at hello@vibeping.dev.