Privacy Policy

1. Introduction

Vibefolio (“we”, “us”) operates the website vibefolio.com (the “Service”). This Privacy Policy explains what data we collect, why we collect it, and how we handle it.

The data controller responsible for your personal data (GDPR Art. 4 No. 7) is the operator named in our Imprint. For any privacy request, contact support@vibefolio.com.

2. Data we collect

Account data — email address, username, and profile information you choose to provide (full name, avatar, location, headline, website, languages, tools, services).

Portfolio content — images, descriptions, URLs, and metadata you submit.

Interaction data — comments, ratings, upvotes, favorites, and feedback you give on other portfolios.

Technical data — IP address, browser type, device information, and pages visited. We use Vercel Analytics, which is cookieless and GDPR-friendly.

Cookies — we do not use tracking or advertising cookies. We set only strictly necessary cookies: a session cookie to keep you signed in, and (before public launch) a site-access cookie for the password gate. These are essential to operate the Service and are exempt from consent under the ePrivacy Directive.

3. How we use your data

We use your data to operate and improve the Service: authentication, displaying your portfolio publicly, delivering feedback emails, calculating rankings, and preventing abuse. We do not sell your data.

4. Third parties

We share data with the following processors:

• Supabase (database, authentication, storage)
• Vercel (hosting, cookieless analytics)
• Resend (transactional emails)
• Cloudflare Turnstile (bot protection on login, signup, and other forms). Runs invisibly and collects technical signals (IP address, user agent, basic interaction telemetry) to distinguish humans from automated traffic. See Cloudflare's Turnstile Privacy Addendum.
• Sentry (error monitoring) — receives diagnostic data about errors, which can include your user ID and technical request details.
• Upstash (rate limiting) — processes your IP address to throttle abusive request patterns.
• Brandfetch and SimpleIcons (brand-logo CDNs) — when a page shows a tool's logo, your browser requests it directly from these CDNs, which receive your IP address and user agent.
• Google and X (Twitter) — only if you choose "Continue with Google" or "Continue with X" to sign in (OAuth authentication).

These processors are bound by data processing agreements and do not use your data for their own purposes.

Some of these processors are based outside the EU/EEA (e.g. in the United States). Where data is transferred internationally, it is protected by an adequacy decision or the EU Standard Contractual Clauses where applicable.

5. Data retention

Your account data is retained as long as your account is active. You can delete your account at any time from Settings → Account → Deletion. Upon deletion, your personal data and portfolio content are removed; aggregate non-identifying data may be retained.

If you join our waitlist without creating an account, we store your email address only to send your confirmation and launch updates. You can have it removed at any time by contacting support@vibefolio.com; our launch-update emails also carry a one-click unsubscribe. Un-converted waitlist emails are deleted at launch or within 24 months, whichever comes first.

6. Your rights (GDPR/DSGVO)

You have the right to access, rectify, erase, restrict, and port your personal data, to object to processing, and to withdraw consent at any time. Contact support@vibefolio.com to exercise these rights.

You also have the right to lodge a complaint with a data-protection supervisory authority (GDPR Art. 77) — for example the authority of your EU member state of residence.

7. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above will reflect the latest revision. Material changes will be communicated via email.

8. Contact

For privacy questions or data requests, write to support@vibefolio.com.