Privacy Policy.

This Privacy Policy explains what data Vibe Code Hacks ("we", "us") collects when you use our site or buy the Product, how we use it, and the choices you have.

1. What we collect

• Email address — when you check out, request an exit-intent download, or submit the contact form.
• Name — only if you provide it via the contact form.
• Order metadata — Stripe session IDs, payment status, discount code used, amount paid, and a unique access token. Your full card details never touch our servers; they're handled directly by Stripe.
• Basic analytics — anonymised events such as which sections you scrolled to and whether the activity ticker / sticky CTA were clicked, used to improve the page.

2. Why we use it

• To deliver the digital product and refresh your download links if needed.
• To send a recovery email if your cart was abandoned (rare and easy to opt out).
• To respond to your contact-form messages and refund requests.
• To detect fraud and abuse of the discount or access-token systems.
• To occasionally send updates about new versions of the guide. You can opt out anytime by replying "unsubscribe" or emailing us.

3. Who we share data with

We share the minimum necessary data with these processors:

• Stripe — payment processing. See stripe.com/privacy.
• MongoDB Atlas — encrypted database hosting for your order and contact records.
• Email provider — for sending receipts, access links, and recovery emails (the provider is listed below once configured).

We do not sell, rent, or trade your personal data — ever.

4. How long we keep it

• Order records: retained for 7 years for tax/accounting compliance.
• Contact messages: retained for 24 months unless you request deletion sooner.
• Marketing emails / leads list: until you unsubscribe.

5. Your rights (GDPR / CCPA)

You can request a copy of your data, ask us to correct it, or ask us to delete it by emailing brian@vibecodehacks.com. We'll respond within 30 days. You may also have the right to lodge a complaint with your local data-protection authority.

6. Cookies

We use a small number of strictly-functional storage items:

• sessionStorage — to remember the countdown-timer state, dismissed banners, and exit-intent flag during your visit.
• ml_admin_token — HttpOnly, Secure, SameSite=Strict cookie used only for admin-panel authentication. Not accessible to JavaScript.

We do not currently use third-party advertising or cross-site tracking cookies.

7. Children

The Product is intended for builders and professionals. It is not directed to children under 16, and we do not knowingly collect data from them.

8. Security

Transmissions are protected by 256-bit TLS. Data at rest is stored on encrypted volumes. We follow the principle of least privilege for admin access. No system is perfectly secure; if we ever discover a breach affecting you, we'll notify you promptly.

9. International transfers

Our infrastructure is hosted in the United States. If you access the site from outside the US, your data may be transferred there. We rely on Stripe's and our hosting provider's standard data-processing agreements for safeguards.

10. Contact

Privacy questions or requests: email brian@vibecodehacks.com or use our contact page.