Privacy Policy

Last Updated: October 11, 2026

Introduction

Welcome to VibeTools ("we," "our," or "us"). This policy explains, in plain terms, what happens to your information when you use the site.

The short version: VibeTools does not collect, store or sell your personal data. The tools run in your browser, and the files, notes and settings you work with stay on your device. The only information that reaches us is what you choose to send through the contact or feedback form. Some features connect to third-party services, which receive your IP address and the request itself, and may collect data under their own privacy policies. Every one of them is listed under Third-Party Services below.

Information We Collect

Browser-Side Storage

VibeTools keeps tool data in your browser using local storage technologies (localStorage and IndexedDB). This data never leaves your device.

  • Pomodoro Timer Data: Session counts, timer preferences, and statistics stored in localStorage
  • Notes & Attachments: All notes and file attachments stored in your browser's IndexedDB
  • Tool State: In-progress work (e.g. Kanban cards, Whiteboard drawings) stored in localStorage

Note: Theme choices, layout preferences, language, and display settings are stored in cookies (not sessionStorage) so they persist across sessions and are readable server-side to prevent a flash of unstyled content on page load. See the Cookies section below for details.

Optional Paid Services (Upcoming)

While VibeTools is free and works entirely in your browser, we're planning to offer an optional paid database configuration service in the future for users who want their data to persist across devices or be stored for longer periods.

Planned Service: We're working on an optional paid database configuration service that will allow you to store your data on our servers. This service will help us maintain the infrastructure needed to keep your data safe and accessible. This feature is not yet available.

  • What We'll Store: Only the data you explicitly choose to sync (notes, preferences, statistics)
  • Why We'll Charge: To cover infrastructure costs (servers, databases, backups, security)
  • Transparency: As a small group of enthusiasts, we'll charge only what's needed to sustain the service
  • Your Choice: This service will be completely optional - the free version works perfectly without it

Service Sustainability: When available, we'll be committed to maintaining this service as long as it's financially feasible. If infrastructure costs change significantly, we may need to adjust pricing or, in rare cases, provide advance notice before discontinuing the service. We'll always give you the option to export your data before any changes.

We're a small team passionate about building great tools. This planned service is part of our vision to provide more value to users who want additional features. If you see potential in what we're creating and want to support us, we'd be grateful for your trust and partnership in growing together. 💙

Contact Form Data Collection

When you submit our contact/feedback form, we collect the following information to help us respond to your inquiry and prevent abuse:

  • Information You Provide: Name, email address, and message content (voluntarily submitted)
  • Location Information: To ensure security and prevent spam, we use ipapi.co to verify legitimate user activity.
  • Device Information: Browser type, operating system, device type, and screen resolution (automatically detected)

Purpose: This information is used solely to respond to your inquiry, prevent spam/abuse, and improve our service. We do not sell, share, or use this data for marketing purposes.

Retention: We value your privacy and data minimalism. Contact form submissions are retained only as long as necessary to review and address your feedback, after which they are permanently discarded. We do not maintain a long-term database of user messages.

Your Rights: Since we do not create user accounts or track personal histories, you don't need to worry about complex data deletion requests. Your local usage data is already strictly on your device, and any feedback you send is handled with transience and privacy in mind.

Cookies

VibeTools uses cookies for two purposes: storing your UI preferences and measuring aggregate site performance. We do not use cookies for advertising, remarketing, or building personal profiles.

Preference Cookies (First-Party)

These cookies save the choices you make in the app so they are remembered on your next visit. They are set only in your browser and are never sent to a third party.

  • Theme & appearance — selected theme, custom theme config, card style, font size, layout density
  • Feature toggles — 3D effects, animations, sounds, parallax
  • Language preference — detected or selected UI language
  • Theme on load — read server-side to render the correct theme before JavaScript runs, preventing a flash of unstyled content

Legal basis (GDPR): Consent. You can withdraw by declining on the cookie banner or clearing cookies in your browser settings.

Functional Cookie — Anti-Spam (First-Party)

When you interact with the contact or feedback form, a cookie stores an encrypted fingerprint (browser type, OS, screen size, and approximate location via ipapi.co). You can delete it at any time from your browser settings. This is used solely to detect and block automated spam submissions. It is never shared with third parties.

Legal basis (GDPR): Legitimate interest in preventing abuse of our contact system.

Analytics (Third-Party — Vercel)

We use Vercel Analytics and Vercel Speed Insights to understand aggregate page-view counts and site performance. Vercel collects anonymised data (page URL, referrer, country-level location, device type). No personally identifiable information is stored.

Legal basis (GDPR): Consent. You can decline on the cookie banner; we will still receive aggregate performance data that Vercel collects at the infrastructure level (not browser-level).

Managing Cookies

  • Cookie banner: Accept or decline when you first visit. Your choice is stored in localStorage under vibetools_cookie_consent.
  • Browser settings: You can delete or block cookies at any time via your browser's privacy settings. Note that blocking preference cookies will reset your theme and layout on each visit.
  • Incognito / private mode: No cookies persist between sessions when browsing privately.

Third-Party Services

VibeTools does not collect your data, but the services below are contacted when you load the site or use the feature named next to them. Each receives your IP address and the request it serves, and handles that under its own privacy policy, which we do not control.

Every visit

  • Vercel hosts the site and serves every page; its BotID check screens automated traffic on forms.
  • Festival greeting: Vercel tells our server your country and state from the request, so we can wish you on your own festivals. Our server looks the day up in Google’s public holiday calendar for your country; nothing about you is sent to Google, and nothing is stored except the date you were last greeted, kept in your own browser.
  • Vercel Analytics & Speed Insights record anonymous page views and performance, only after you accept analytics in the cookie banner.
  • Cloudflare answers DNS lookups for the domain.

Only when you use a feature

  • Contact & feedback form: Cloudflare Turnstile checks you are human; ipapi.co looks up an approximate location to block spam; your message is delivered by email through Gmail, Brevo or Resend.
  • Sign in with Google (optional): Google handles the sign-in.
  • Background Remover: the AI model is downloaded from Hugging Face and the runtime from jsDelivr. Your photo is not sent anywhere.
  • Audio Extractor & GIF Maker: the ffmpeg engine is downloaded from unpkg. Your files are not sent anywhere.
  • File Share: the PeerJS server introduces the two devices and Metered provides relay servers when a direct connection is not possible. Files travel encrypted between the devices.
  • Password Generator security check: Have I Been Pwned is asked about the first 5 characters of a hash of the password, never the password itself.
  • Speed Test: Cloudflare’s speed test servers measure the connection; ipapi.co and similar services look up your IP and ISP to show them to you.
  • Wallpaper Gallery: images come from Pixabay.
  • Pomodoro music & radio: streams come from SomaFM and other stations listed by Radio Browser.
  • Pomodoro notes: a YouTube video you embed loads from youtube-nocookie.com.
  • Random Reads & news feed: Wikipedia, Google News, and the RSS feeds of Hacker News, TechCrunch, Smashing Magazine, The Verge and Wired, fetched through rss2json.
  • Horoscope: a public horoscope API.
  • Secure links (MFA): a random revocation key, not personal data, is kept in Vercel KV until the link expires.

The full list of software VibeTools is built with is on the Credits and Open-Source Licences pages.

Copyright & Content Disclaimer

User Responsibility

VibeTools is a collection of productivity and utility tools. We do not host, store, or distribute copyrighted content. Any content accessed through our tools (images, articles, radio streams, etc.) is sourced from third-party APIs and services.

Copyright Infringement

We respect intellectual property rights. To report material on VibeTools that you believe infringes your copyright, follow the copyright and takedown policy in our Terms. Sources of third-party images, music, articles and radio streams are listed on the Credits page.

Limitation of Liability

VibeTools and its creators are not liable for any copyright infringement or misuse of content accessed through third-party APIs. Users are responsible for ensuring their use of content complies with applicable copyright laws and terms of service.

Data Security

Since all data is stored locally in your browser:

  • Your data never leaves your device
  • We cannot access your data
  • Clearing your browser data will delete all stored information
  • Using private/incognito mode will not persist data between sessions

Your Rights

You have complete control over your data:

  • Access: All your data is accessible through your browser's developer tools
  • Delete: Clear your browser's local storage and IndexedDB to remove all data
  • Export: Some tools (like Pomodoro Stats) offer export functionality
  • Control: You can disable features or stop using the service at any time

For personal data you have sent us, such as a contact or feedback message, you have the rights given by India’s Digital Personal Data Protection Act, 2023 and similar laws where you live: to ask what we hold about you, to have it corrected or erased, to withdraw consent, to nominate someone to exercise these rights for you, and to have a complaint heard. Email support@vibetools.site with the subject “Privacy request”. If you are not satisfied with our answer, you can write to our Grievance Officer, and in India you may then complain to the Data Protection Board of India.

Children's Privacy

VibeTools’s tools work in your browser and do not collect personal information, so they can be used at any age, with parental guidance recommended for younger users. The contact and feedback forms do send us your name and email: if you are under 18, please ask a parent or guardian to send the message for you. We do not knowingly keep personal data from children, and will delete it if we learn we have received it.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of VibeTools after changes constitutes acceptance of the updated policy.

Contact Us

We value your input! Please give your valuable feedback on our Feedback page.

Summary

Local Storage Only

All data stays in your browser

No Profiling

Analytics are anonymised — no personal profiles or ad targeting

No Liability

Not responsible for third-party content

Transparent

Open about third-party services