The short version: we keep the report, not your site. No ad trackers, no selling data, and you can ask us to delete anything.
What we collect
- The URL you scan and its report. Findings, score and grade. We never store the pages we fetch. Secrets we detect are masked before saving.
- Your email address, when you sign in with a magic link. You need an account to run scans, and we use it to show you your past scans and to stop abuse.
- Payment details, if you unlock a report. Our payment provider, Dodo Payments, collects your email and card details and is the merchant of record. We receive a payment reference and which report it unlocked; we never see or store your card.
- Your IP address, held briefly in memory to stop one person hammering the scanner. It isn’t written to our database.
- Anonymous page-view counts through Vercel Analytics, which uses no cookies and doesn’t identify you.
Cookies
The only cookie we set keeps you signed in. There are no advertising or cross-site tracking cookies, which is why you don’t see a cookie banner here.
Who can see a report
Reports are public to anyone who has the link. The link contains a long random ID that can’t be guessed, and report pages are hidden from search engines. Don’t share a link you wouldn’t want forwarded.
Who we share data with
Only the companies that run the service for us: Vercel (hosting and anonymous analytics), Supabase (database and sign-in emails) and Dodo Payments (checkout, only if you pay). We don’t sell or rent data to anyone.
How long we keep it
Reports stay until you ask us to delete them. Sign-in records stay while your account exists.
Your rights
You can ask for a copy of your data, a correction, or deletion of a report or your account at any time. Email hello@vibeliq.comand we’ll sort it within 30 days. If you’re in the EU or UK you can also complain to your data protection authority.
Scanning sites you don’t own
The scanner only reads what any visitor’s browser can already see. If your site was scanned and you’d like the report removed, email us the link.