Who We Are

Vibesim ("we," "us," "our") is an AI-powered web editor and community platform operated by CoponStackos. This Privacy Policy applies to all services available at vibesim.coponstackos.com and associated subdomains.

Data We Collect

How We Use Your Data

We use the data we collect to provide, maintain, and improve the VibeSim platform; to authenticate your identity and secure your account; to compute and display your storage usage, view counts, and community engagement metrics; and to detect and prevent fraud, abuse, and technical attacks.

We also use it to enforce our Community Rules and Terms of Service, including applying updated rules to previously posted content where necessary for moderation purposes; and to send you essential service communications such as account verification, security notices, and geographic restriction updates. We do not send marketing emails without your explicit consent.

We analyze aggregate, anonymized usage patterns — such as which AI models are used most frequently and how credits are consumed — to inform decisions about model availability, credit costs, and platform sustainability. This analysis is performed on aggregated data and does not result in individual profiling.

Ban Enforcement & Account Linking

To maintain platform integrity, we associate IP addresses and browser fingerprints with user accounts. When a user is banned, we may prevent new account creation from the same IP addresses or fingerprints.

If you are banned, attempting to create a new account from the same IP address or with the same browser fingerprint will be blocked. This is a necessary measure to prevent ban evasion and repeated abuse of the platform.

We may also identify related accounts (multiple accounts sharing IP addresses or fingerprints) for administrative purposes, such as investigating abuse patterns or enforcing storage limits fairly.

Geographic Restrictions & Age Verification

VibeSim does not perform ID-based or biometric age verification, and we do not collect government-issued identity documents or facial recognition data. This is by design: we believe these systems pose disproportionate privacy risks to users.

As a consequence, users in jurisdictions that mandate such systems are prohibited from using this service. See the Terms of Service, Section 2, for the current list. We do not use IP geolocation to proactively block access, but by registering you represent that you are not located in a restricted jurisdiction.

If your country is added to the restriction list after you have created an account, we will notify you by email and provide reasonable time to export your data before access is suspended.

Data Sharing

We do not sell your personal data. We share it only with infrastructure providers such as our hosting and database provider, who process data on our behalf and are contractually bound to protect it; with AI model providers when you use AI features, where your prompts are sent to the relevant API; with Pollinations' endpoints when you use a Pollinations key; and with law enforcement or authorities when required by law, court order, or to protect the safety of users or the public.

Public project content including code, screenshots, and titles is visible to all users and anonymous visitors by design.

Cookies & Local Storage

VibeSim uses a JWT authentication token stored in localStorage to keep you logged in. It expires after a set period and is only used for requests to our own API. Editor preferences such as theme, layout, and settings are also stored locally in your browser. Standard BYOK keys you configure are stored in localStorage and are not sent to our servers except during individual API requests, as described in Section 2.

We do not use third-party tracking cookies or advertising cookies.

Data Retention

We retain your data for as long as your account is active. When you delete your account, your profile, projects, and public content are removed from the platform within 30 days. Any server-side stored API keys such as Pollinations keys are deleted immediately. IP addresses and fingerprint associations are retained for up to 90 days for security purposes. Anonymized, aggregated usage statistics may be retained indefinitely. Certain data may be retained longer when required by law or for legitimate abuse-prevention purposes.

Your Rights

Depending on your location, you may have the right to access a copy of the data we hold about you, to request correction of inaccurate information, to request deletion of your account and associated personal data, to request a portable export of your projects and content, and to object to certain processing of your data.

To exercise any of these rights, contact us at privacy@vibesim.coponstackos.com. We will respond within 30 days.

Security

We implement reasonable technical and organizational measures to protect your data. These include HTTPS encryption for all data in transit, bcrypt password hashing, JWT-based authentication with expiration, encryption at rest for server-side stored API keys, and project sandbox isolation to prevent cross-project data access.

No system is perfectly secure. If you discover a security vulnerability, please disclose it responsibly to security@vibesim.coponstackos.com before public disclosure.

Children's Privacy

VibeSim is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it promptly. Parents or guardians who believe their child has provided us with personal data should contact us immediately.