Last updated: April 5, 2026
Short version: VibeCraft reads only the visible content of your active browser tab to generate suggestions. We don't store your code, sell your data, or share it with any third party for advertising purposes. The full details are below.
This Privacy Policy applies to the VibeCraft Chrome Extension (version 1.1.9 and above) and the VibeCraft website at vibecraft-app.com. "VibeCraft", "we", "us", or "our" refers to the VibeCraft service and its operators. By installing or using VibeCraft, you agree to this policy.
When the extension is active, it may read the following from your currently open browser tab to generate AI suggestions:
This data is sent over HTTPS to our backend API and processed in real time. It is not stored in any database after the API response is returned.
If you voluntarily provide your email address on our website (e.g. newsletter, early access), we collect:
When you visit vibecraft-app.com, our hosting provider (Vercel) automatically logs standard web server data including IP address, browser type, and pages visited. This data is used solely for infrastructure monitoring and is subject to Vercel's privacy policy.
We use the data described above strictly for the following purposes:
chrome.storage.local and never transmittedWe do not use your data for advertising, profiling, or sale to third parties.
The following permissions are declared in the extension's manifest.json and are required for the extension to function. Each is justified below:
| Permission | Why It's Needed |
|---|---|
| activeTab | Allows VibeCraft to read the content of the tab you are currently viewing — only when the extension popup is open or a suggestion is triggered. No background tab access. |
| tabs | Used to detect the URL of the active tab in order to identify which AI coding platform you are on, and to manage favicon indicator animations. Tab content is never read via this permission. |
| storage | Stores your preferences (e.g. theme, panel position) locally on your device using chrome.storage.local. Data never leaves your browser. |
| scripting | Injects the VibeCraft suggestion UI into supported platforms so suggestions can appear in context. Only runs on the active tab when triggered by the user. |
| sidePanel | Enables the optional Side Panel view of the VibeCraft interface, available via the Chrome side panel API. |
| host_permissions: <all_urls> | VibeCraft supports a growing list of AI coding platforms (Lovable, Bolt, Replit, Base44, v0, Glitch, and others). Because new platforms may be added and users may access them on custom or subdomain URLs, broad host permission is required to ensure the extension can activate on any supported site. The extension does not collect or transmit data from non-targeted pages. |
Single purpose: VibeCraft's sole purpose is to provide AI-powered UX and code improvement suggestions for developers using AI-powered coding platforms inside the Chrome browser.
No remote code execution: VibeCraft does not load, execute, or inject any JavaScript, HTML, or other code fetched from a remote server at runtime. All extension logic is bundled and reviewed as part of the published package. API calls return plain JSON data (suggestion text), which is never evaluated or executed as code.
No data harvesting: VibeCraft does not monitor, collect, or transmit user data except as described in this policy and strictly required for the single purpose above.
VibeCraft relies on the following trusted third-party services:
We do not use Google Analytics, Facebook Pixel, or any other advertising or tracking services.
To request deletion of your personal data, email us at support@vibecraft-app.com. We will process requests within 14 business days.
All data transmitted between the extension and our API is encrypted via HTTPS/TLS. Our API endpoints are authenticated, rate-limited, and do not log request payloads beyond what is needed for error monitoring. We do not store your editor content or chat history at any point in our infrastructure.
If you are located in the European Economic Area (EEA), UK, or Switzerland, you have the following rights under applicable data protection law:
To exercise any of these rights, contact us at support@vibecraft-app.com. Our legal basis for processing email data is your explicit consent (Article 6(1)(a) GDPR). Processing of tab content for AI suggestions is based on legitimate interests in providing the service you requested (Article 6(1)(f) GDPR).
VibeCraft is not intended for use by anyone under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
The VibeCraft website (vibecraft-app.com) uses no tracking or advertising cookies. The site may use essential session-related cookies set by our hosting infrastructure (Vercel) for performance and security purposes only. No cookie consent banner is displayed because no non-essential cookies are used.
The Chrome extension does not use cookies.
We may update this policy as the product evolves. If we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Continued use of VibeCraft after changes are published constitutes your acceptance of the updated policy.
For any questions, concerns, or data requests relating to this Privacy Policy, please contact:
VibeCraft Support
Email: support@vibecraft-app.com
Website: vibecraft-app.com