Privacy Policy

vibeharbor.io is run by Lliam Scholtz (see About). This page covers what happens to your data when you visit this website. It does not cover the future product described in parts of the site — the fixed-price hardening service is currently pre-launch, delivered by manual human follow-up over email, not by an automated pipeline. If that changes, this page will be updated to describe the new data flows before they go live, not after.

What this site collects

Analytics

This site uses Google Analytics (GA4) to understand which pages get read and how people find them — but only if you accept the cookie banner shown on your first visit. Nothing from Google Analytics loads or runs before that. If you accept, Google Analytics sets cookies (typically named _ga and _ga_*) that assign your browser a random identifier, and collects the page you viewed, the page you came from, approximate location derived from your IP address, and your device and browser type. It does not collect your name or email address unless you separately give those to us by email.

This data is processed by Google under Google's own privacy policy and retained according to the retention period set in our Analytics configuration. If you decline, or later change your mind via "Cookie preferences" in the footer, any analytics cookies already set are deleted immediately. You can also opt out of Google Analytics tracking across all websites using Google's browser opt-out add-on, or block it with a browser extension or content blocker.

Fonts

Typefaces on this site (Fraunces, Manrope, JetBrains Mono) are loaded from Google Fonts at page load. Loading a font this way sends your IP address to Google's font servers, in the same way any request to any external server does. Google's own position is that font requests are not used for ad personalisation; see Google Fonts' privacy FAQ for their account.

Hosting logs

This site is served via Cloudflare. Like any web host, Cloudflare's infrastructure processes standard connection data to serve pages and defend against abuse — IP address, timestamp, requested URL and user agent. We don't separately access or store this beyond what Cloudflare's own dashboard shows in aggregate.

Email

The "Connect your code" buttons on this site open a pre-filled draft in your own email client — nothing is sent to us until you choose to send that email yourself. If you email hello@vibeharbor.io, whatever you include (a repository URL, a description of your project, your name) is received in a mailbox and read by Lliam personally, used only to respond to what you asked and to prepare a quote if you want one.

The GitHub App link

The "Install the app instead" link takes you to GitHub's own install flow for the vibeharbor.io GitHub App, governed by GitHub's own privacy statement. Installing it does not currently trigger an automated scan of your repository — a person follows up by email afterwards, per the process described above. This is a real limitation of where the product is today, not a design choice being described as more automated than it is.

What this site does not collect

No payment details are collected or processed anywhere on this site — there is no checkout, and Stripe (or any other payment processor) is not yet integrated. No account system exists, so there are no passwords or profile data to store. No advertising or retargeting pixels run here beyond the analytics described above. Your code is never accessed, scanned or stored by anything on this website itself.

Cookies

The only cookies this site can set are the Google Analytics ones described above, and they're only set if you accept the banner shown on your first visit. Your accept/decline choice itself is remembered in your browser's local storage, not a cookie, so we can honour it without asking you again on every page. There's no preferences cookie beyond that, no session cookie and no cart.

Change your mind at any time using "Cookie preferences" in the footer of any page — it reopens the same banner and applies your new choice immediately, including deleting analytics cookies if you switch to decline.

Your rights

You can ask what data we hold about you, ask us to correct or delete it, or object to how it's used, by emailing hello@vibeharbor.io. For anything sent to Google Analytics, deletion requests go through Google directly, since we don't have access to individual visitor records — only aggregate reports. We don't sell personal data to anyone, and we don't share it with third parties beyond the processors named on this page (Google, Cloudflare, GitHub), each acting under their own privacy policy for the service they provide.

Children's privacy

This site is not directed at children, and we don't knowingly collect data from anyone under 16. If you believe a child has provided us information by email, contact us and we'll delete it.

Changes to this policy

If what this site collects changes — most likely when the product moves from manual follow-up to an automated scan, or when payment is added — this page will be updated first, with the date at the top of the page reflecting the last real change, not a routine re-publish.