隱私 政策
TL;DR: We collect as little as possible, don't track site visitors, and retain anonymous keys only until you delete them.
What we collect
- IP address — rate limiting and abuse prevention. Stored in ephemeral caches (24h).
- Uploaded site content — the files you upload via the API.
- API keys — hashed (SHA-256). We never store the raw key.
- Request logs — Cloudflare Workers generates standard request logs.
What we don't collect
- Cookies or browser fingerprinting on user sites
- Email unless you register a Pro account
- Payment information (handled by Stripe when Pro launches)
Third parties
We use Cloudflare for hosting (Workers, R2, D1, KV). See their privacy policy.
Data retention
Free tier sites are deleted automatically after 7 days (30 days once the API key is claimed by an account). Anonymous API keys are retained until manually deleted.
Your rights (GDPR / CCPA)
You can request deletion of your API key and all associated sites by emailing hello@vibedrop.cc with the key prefix.