Privacy Policy

Last updated: 2026-04-18

What we collect

• IP address — used for rate limiting and abuse prevention. Stored in ephemeral caches (24h).
• Uploaded site content — the files you upload via the API.
• API keys — hashed (SHA-256). We never store the raw key.
• Request logs — Cloudflare Workers generates standard request logs.

What we don't collect

• Cookies or browser fingerprinting on user sites
• Email unless you register a Pro account
• Payment information (handled by Stripe when Pro launches)

Third parties

We use Cloudflare for hosting (Workers, R2, D1, KV). See their privacy policy.

Data retention

Free tier sites are deleted automatically after 72 hours. Anonymous API keys are retained until manually deleted.

Your rights (GDPR / CCPA)

You can request deletion of your API key and all associated sites by emailing hello@vibedrop.cc with the key prefix.

Contact

hello@vibedrop.cc