Privacy policy
1. Controller
Code Factory GmbH
Kettenbrückengasse 23/2/12, 1050 Vienna, Austria
Email: info@vibe-coding.space
vibe-coding.space is a service offered by Code Factory GmbH. Until a separate company is founded (expected spring 2027), Code Factory GmbH is the controller within the meaning of the GDPR.
For privacy questions, contact us at info@vibe-coding.space.
2. What we offer
vibe-coding.space is a website with the "Vibe Code Checker": you upload code and receive an automated report. You can also sign up for the beta, for updates, and send us feedback.
3. What data we process, why, and on what basis
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Server logs (IP address, time, page, browser) | Operation, security, troubleshooting | Art. 6(1)(f) (legitimate interest) |
| Uploaded code | Creating your check report | Art. 6(1)(b) (contract) |
| Check report | Showing your result | Art. 6(1)(b) |
| Email address for login link | Passwordless sign-in | Art. 6(1)(b) |
| Profile, nickname, avatar | Your account | Art. 6(1)(b) |
| Email address for updates | Sending news (confirmed via link) | Art. 6(1)(a) (consent) |
| Beta sign-up, riddle | Assigning and managing your beta spot; emails about the beta | Art. 6(1)(b); for emails with beta news Art. 6(1)(a) (consent given at sign-up) |
| Proof of consent (time, IP address, version of the consent text) | Proving that you consented | Art. 6(1)(c) with Art. 7(1) (duty to prove consent) |
| Feedback (with or without email) | Improving the service, replying to you | Art. 6(1)(f) |
| Internal events (e.g. "check completed"), partly linked to your profile | Understanding how the service is used | Art. 6(1)(f) |
| Mail log | Proof and troubleshooting of email delivery | Art. 6(1)(f) |
Updates (newsletter): You only receive updates after clicking the link in our confirmation email (double opt-in). Every email contains an unsubscribe link. You can withdraw consent at any time.
No AI provider during the beta: During the beta your code is not sent to any AI service. If this changes, we will inform you beforehand and update this policy.
No tracking cookies: We do not use advertising or analytics cookies and do not embed content from third-party servers. Technically necessary storage is used only where required for the service (Section 165(3) Austrian Telecommunications Act 2021):
- Cookie
vcs_session: set only when you sign in via the login link. It keeps you signed in and lasts 30 days. Login does not work without it. - Browser storage (
localStorage): The site remembers in your browser what you entered or have already seen (e.g. your email address for the next form, your avatar, your riddle code, whether you have seen an introduction). This data stays on your device and is not sent to us automatically. You can delete it at any time in your browser settings.
Sign-ups from our previous site: If you signed up on the previous sign-up page of vibe-coding.space before November 2026, we transferred your sign-up (email address, your answer, time) into this system. The previous site remains only briefly as a backup after the move; it is then switched off and its data deleted.
4. How long we keep data
| Data | Retention |
|---|---|
| Uploaded code | 24 hours |
| Reports without a profile | 7 days |
| Unconfirmed profile drafts | 7 days |
| Update sign-ups | until you unsubscribe; unconfirmed or unsubscribed sign-ups are deleted after 30 days |
| Server logs | overwritten continuously once the limited storage reserved for them is full (depending on traffic, after a few days to weeks) |
| Mail log | 30 days, failed emails 90 days |
| Internal events | 24 months |
| Backups | 14 days |
| Profile and reports linked to your profile | until you request its deletion |
| Feedback and beta sign-ups | 12 months after the beta ends |
| Proof of consent | as long as the sign-up it belongs to |
5. Service providers (processors)
- Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany – servers, database, backups; data centre Falkenstein (Germany).
- World4You Internet Services GmbH, Austria – domain, DNS and email delivery.
- Let's Encrypt (Internet Security Research Group, USA) – HTTPS certificate; no visitor data is transferred.
- Payments (once available): Stripe Payments Europe Ltd., Ireland. You enter payment details directly with Stripe; we do not receive full card data.
All data is processed in the EU.
6. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection, and to withdraw consent. Write to info@vibe-coding.space.
You may also complain to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
7. Changes
We update this policy when our service changes. This also covers the planned spin-off of "vibecoders space": once rights and obligations transfer to the new company, Code Factory GmbH will be replaced by it in this policy and you will be informed.
Last updated: November 2026