1. Who We Are

CheckMyVibeCode ("we", "us", "our") is a community platform for showcasing AI-generated software projects, accessible at checkmyvibecode.com. This Privacy Policy explains how we collect, use, and protect your personal data.

The controller is Mihailo Lalic, Hauptstraße 53, 52399 Merzenich, Germany. For privacy-related questions, contact support@checkmyvibecode.com.

2. What Data We Collect

Account data — When you sign up or log in via Google or GitHub OAuth, we receive your email address, name, and profile picture from the respective provider. We store this data to identify your account.

User-generated content — Projects you submit, comments you post, and upvotes you cast are stored in our database and visible to other users.

Optional measurement — Only with your separate permission for the relevant purpose, Google Analytics processes usage events, online identifiers and device/network information, or X processes advertising measurement data. These data may be personal data; they are not described as anonymous.

Technical data — Standard server logs (IP address, browser type, referrer) may be recorded automatically. These are used for security and debugging purposes only.

3. How We Use Your Data

• To provide and maintain the platform (authentication, displaying your projects and profile)
• To allow other users to interact with your content (upvotes, comments)
• To analyze how the platform is used and improve it (analytics, only with consent)
• To protect the platform from abuse and ensure security

Account, content and payment processing needed to provide the service is based on Art. 6(1)(b) GDPR. Security and abuse prevention rely on Art. 6(1)(f) GDPR, with the legitimate interest of protecting the service and its users. Statutory record keeping relies on Art. 6(1)(c) GDPR. Optional analytics, advertising measurement and newsletter marketing rely on your consent under Art. 6(1)(a) GDPR; access to non-essential information on your device additionally requires consent under § 25(1) TDDDG. Necessary session storage is used under § 25(2) TDDDG. We do not make decisions producing legal or similarly significant effects solely through automated processing.

4. Emails and Newsletter

Service and notification emails — We send emails that belong to your account and the service, such as payment and refund confirmations, legally required notices (for example changes to our terms) and notifications about your own projects (comments, upvotes, approval, boosts of your project, Code Check alerts). You can turn off notifications about your projects in Account settings ("Notifications about my projects") or with the link in every notification email. Account, payment and legally required notices are still sent. Legal basis: Art. 6(1)(b) and (c) GDPR; for project notifications Art. 6(1)(f) GDPR, our legitimate interest in keeping you informed about activity on your projects.

Newsletter (product updates and tips) — Only with your consent (Art. 6(1)(a) GDPR). We ask for it with the following text, depending on where you agree:

• Dialog after sign-in: "Get new vibe-coded projects, product updates and tips by email, about once a week. We send you a confirmation email first. You can unsubscribe at any time."
• Account settings: "Product updates & newsletter: new projects, product updates and tips, about once a week. Turning this on sends you a confirmation email first."
• Prompt in the app: "Want product updates and tips? Get occasional emails about new features. We send you a confirmation email first. You can unsubscribe at any time."

Double opt-in — After you agree, we send a confirmation email ("Please confirm your CheckMyVibeCode updates") with a link that is valid for 7 days. You only receive the newsletter after you open that link and click "Yes, confirm". If you do not confirm, you will not receive it. To be able to prove your consent, we store the consent text you saw and its version, where you agreed (dialog, settings or prompt), the time of your request, the time of your confirmation and the IP address from which you confirmed (Art. 6(1)(c) and (f) GDPR). These records are deleted together with your account. Newsletter sign-ups from before this procedure are not used for sending until they are confirmed again.

Pro customers — If you subscribe to Pro, we may send you occasional information about our own similar services to the email address used for the purchase, without separate consent (Section 7(3) UWG, Art. 6(1)(f) GDPR). You can object at any time, at no cost other than the basic transmission costs, with the link in every such email or in Account settings.

Unsubscribing — Every newsletter and every notification email contains a link that unsubscribes you from that kind of email only (one click, also supported by your email program); newsletter and project notifications are separate choices. You can also change both in Account settings at any time. Withdrawal does not affect the lawfulness of processing before it. We keep your email address and the chosen category on a suppression list so we do not email you again against your wish.

Sponsored boosts — If you boost another builder's project, the owner is told that their project was boosted. Your username is shown to the owner and next to the "Sponsored" label only if you tick "Show my username as sponsor" at checkout (Art. 6(1)(a) GDPR); your email address is never shown. A refund for a removed or cancelled boost is processed through Stripe.

5. Third-Party Services

Supabase — Provides the database, authentication and uploaded-file storage. Account information and submitted content are processed there. Supabase Privacy Policy

Google Analytics 4 — Loaded only if you enable analytics. Advertising personalization and Google Signals are disabled in our configuration. Google Privacy Policy.

X — Loaded only if you enable advertising measurement, to measure advertising performance. X may associate browser identifiers with its own data. X Privacy Policy.

Replit — Hosts the web application and processes network requests and operational logs. Replit Privacy Policy.

Stripe — Processes payments, subscriptions, refunds and fraud prevention. Checkout receives your email address, account identifier, selected product and, for boosts, the project identifier. Card details are entered at Stripe, not stored by this application. Stripe Privacy Policy.

Resend — Delivers service, payment and optional notification emails; email addresses and message contents are transmitted for delivery. Resend Privacy Policy.

International processing — These providers may process personal data outside the EEA, including in the United States. The applicable transfer safeguards and contractual arrangements depend on the provider and service configuration. Contact us for information on the safeguards applicable to your data; the use of a provider does not by itself guarantee EU-only processing.

Google & GitHub OAuth — When you log in via Google or GitHub, their respective privacy policies apply to the authentication process. We only receive and store the data they share with us (email, name, avatar).

6. Cookies

We use the following cookies and local storage:

• Authentication session — Stored in localStorage via Supabase to keep you logged in. Essential for the platform to work.
• Theme preference — We save your dark/light mode choice in localStorage.
• Cookie consent — Analytics and advertising preferences, version and choice time are stored locally for up to 180 days, then requested again. If saving fails, optional tracking is stopped and we attempt to discard the previous consent. An essential first-party cookie (cmvc_consent_denied, value 1, up to 180 days) may preserve the refusal; it contains no identifier and is removed after a successfully saved new choice. Open tabs are notified where supported. If all storage is blocked, we cannot guarantee persistence and ask you to clear website data. Previously saved consent is not used while its storage cannot be updated.
• Google Analytics cookies — Only set if you accept analytics cookies. Used to measure traffic and usage, including whether sign-up, project submission, Code Check, boost and Pro checkout steps were completed.
• Campaign source — If you arrive through a link carrying utm_source, utm_medium or utm_campaign, these campaign labels (no identifier) are kept in the session storage of this tab, which your browser deletes when you close the tab. If you sign up in that tab, they are saved with your account so we can see which channels bring sign-ups and Pro purchases (Art. 6(1)(f) GDPR).

The same choice is offered in every country. Google Fonts and the Supabase browser library are served locally; no external IP-geolocation service is used to choose whether to show the banner. External user images and authentication/storage services may still receive network requests necessary to display content or provide the requested service.

Open cookie settings to change your choices at any time. Withdrawal stops future optional tracking and reloads the page to remove loaded tracking code. We remove accessible first-party measurement cookies; third-party cookies and data already held by providers cannot be deleted by this site. Withdrawal does not affect the lawfulness of processing before withdrawal.

7. Your Rights (GDPR)

If you are located in the EU/EEA, you have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your account and associated data
• Portability — Request your data in a machine-readable format
• Objection — Object to processing of your data for analytics purposes
• Withdraw consent — Withdraw optional measurement consent using Cookie settings in the footer. Turn off the newsletter or project notifications in Account settings or with the link in each email.

To exercise these rights, contact support@checkmyvibecode.com. We normally respond within one month; any legally permitted extension will be explained. You also have the right to restriction of processing and to complain to a supervisory authority, including the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

8. Data Retention

Public Pro cancellation declarations are stored with the submitted identification and contract details, requested termination date and time of receipt. We use these records to handle and evidence contract termination and related legal obligations (Art. 6(1)(b) and (c) GDPR). Confirmation emails are sent via Resend. Records are accessible only to the operator through the protected administration area and are retained as necessary for processing, legal claims and applicable statutory retention obligations; they are not used for marketing. You can submit a declaration without signing in via Cancel contracts here. Receipt of a declaration does not by itself establish the submitter's entitlement to terminate someone else's contract.

Account data and submitted content are retained while needed to provide your account and published contributions. On a justified deletion request, data no longer required are deleted, subject to statutory retention duties and the protection of legal claims. Payment/accounting records are retained for the applicable statutory period. A minimal suppression entry is retained to respect an email opt-out. Provider logs, backups and analytics records follow the applicable provider retention configuration; contact us for details. Cookie choices expire after 180 days.

9. Changes to This Policy

We may update this notice when processing changes. Continued use does not constitute consent to new optional processing; where required, we ask for new consent.

10. Contact

Questions about this Privacy Policy? Email us at support@checkmyvibecode.com

Paid services: Pro and project boosts

Your contracting partner is Mihailo Lalic, Hauptstraße 53, 52399 Merzenich, Germany, support@checkmyvibecode.com. Pro provides unlimited project submissions, priority review and the displayed discount on boosts. Pro is billed monthly in USD and renews automatically until cancelled. Cancel through Account settings → Manage subscription before the next renewal; access remains until the paid billing period ends.

Boosts are one-off purchases for the selected slot and duration, not subscriptions. Buying a boost does not grant ownership, editing rights or a guarantee of visitors, clicks or sales. The booking window and price are shown during purchase. Contact support if a paid placement cannot be delivered.

Boosting your own project. The owner of a project may boost it while it is still in review. Moderation still applies: a pending project is not publicly displayed until approved, and the booked period of an owner's boost can begin before approval. Only owner boosts can begin before approval.

Boosting another builder's project (third-party boosts). A logged-in buyer may boost a project they do not own only after the project has been approved and only while its owner allows third-party boosts. Projects still in review can only be boosted by their owner. A buyer can hold at most three running or scheduled third-party boosts at the same time. Third-party boosts are labelled "Sponsored". The buyer's username is shown with the label, and to the owner, only if the buyer agrees at checkout ("Show my username as sponsor"); the buyer's email address is never shown. The owner is notified about every third-party boost on their project, can turn off third-party boosts for the project at any time in the project settings (boosts already booked stay until removed), and can remove a running or scheduled third-party boost at any time.

Cancellation and refunds. If the owner removes a third-party boost, or if we cancel a boost, or if the project is rejected or deleted during the booked period, the boost ends and the buyer automatically receives a full refund for the unused part of the booked period, or a full refund of the price paid if the period has not started yet. Refunds are made to the original payment method through Stripe; the buyer is informed by email. Statutory rights, including the right of withdrawal, remain unaffected.

Before committing to payment, review the product, billing interval or duration and total, including any applicable tax, in Stripe Checkout. This website's Continue button opens Checkout; it does not itself charge you. Statutory consumer rights remain unaffected. For withdrawal instructions and the model form, see Right of withdrawal. Starting service early requires your express request and does not immediately extinguish a withdrawal right that only expires on full performance.

1. Acceptance

By using CheckMyVibeCode ("the platform"), you agree to these Terms of Service. If you do not agree, please do not use the platform. We reserve the right to update these terms at any time.

2. What CheckMyVibeCode Is

CheckMyVibeCode is a community platform where developers can showcase AI-assisted ("vibe-coded") software projects, give and receive feedback, and upvote projects they find interesting. It is not a software marketplace and does not handle payments between users.

3. Your Account

You may sign up using a Google or GitHub account. You are responsible for all activity under your account. You must not share your credentials or create accounts on behalf of others without their consent.

You must be at least 13 years old to use this platform (or the minimum age required in your country).

4. Acceptable Use

When submitting projects or posting comments, you agree to:

• Only submit projects you have the right to share
• Keep comments respectful and constructive
• Not post spam, misleading information, or promotional content unrelated to AI-built projects
• Not submit illegal content, content that violates third-party intellectual property rights, or content that is harmful, abusive, or hateful
• Not attempt to manipulate upvotes or game platform metrics
• Not use the platform to scrape data, run bots, or interfere with platform functionality

5. Content Ownership

You retain ownership of the content you submit. By posting on CheckMyVibeCode, you grant us a non-exclusive, worldwide, royalty-free license to display and distribute your content on the platform.

We reserve the right to remove any content that violates these terms without notice.

6. Disclaimer & Limitation of Liability

The platform is provided "as is" without warranties of any kind. We do not guarantee uninterrupted availability or that the platform will be error-free.

We are not responsible for any direct, indirect, or consequential damages arising from your use of the platform or content posted by other users.

Project listings are user-submitted and we do not verify or endorse any project, its quality, or its safety.

7. Termination

We reserve the right to suspend or terminate accounts that violate these terms. You may request account deletion at any time by contacting support@checkmyvibecode.com.

8. Governing Law

These terms are governed by applicable law. Any disputes will be resolved through good-faith negotiation first. If unresolved, disputes are subject to the jurisdiction of the courts where the platform operator is located.

9. Contact

Questions about these Terms? Email us at support@checkmyvibecode.com

Information according to § 5 DDG

Mihailo Lalic
Hauptstraße 53
52399 Merzenich
Germany

Contact

Email: support@checkmyvibecode.com

Responsible for content according to § 18 (2) MStV

Mihailo Lalic, Hauptstraße 53, 52399 Merzenich, Germany

Consumer dispute resolution

We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board (§ 36 VSBG).

User content

Projects, comments and forum posts on CheckMyVibeCode are published by their authors. If you come across content that violates the law or your rights, please tell us at support@checkmyvibecode.com and we will remove it promptly.

If you are a consumer (a natural person buying for purposes outside your trade, business or profession), you have the following statutory right of withdrawal.

Right of withdrawal

You have the right to withdraw from this contract within fourteen days without giving any reason.

The withdrawal period will expire after fourteen days from the day of the conclusion of the contract.

To exercise the right of withdrawal, you must inform us (Mihailo Lalic, Hauptstraße 53, 52399 Merzenich, Germany, email: support@checkmyvibecode.com) of your decision to withdraw from this contract by an unequivocal statement (e.g. a letter sent by post or an email). You may use the model withdrawal form below, but it is not obligatory.

To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.

Effects of withdrawal

If you withdraw from this contract, we shall reimburse to you all payments received from you without undue delay and in any event not later than fourteen days from the day on which we are informed about your decision to withdraw from this contract. We will carry out such reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.

If you requested to begin the performance of services during the withdrawal period, you shall pay us an amount which is in proportion to what has been provided until you have communicated to us your withdrawal from this contract, in comparison with the full coverage of the contract.

Early expiry of the right of withdrawal

For a service contract, the right of withdrawal expires once we have fully performed the service, if we began the performance only after you gave your express consent and at the same time confirmed your awareness that you lose your right of withdrawal upon complete performance of the contract by us.

Model withdrawal form

(Complete and return this form only if you wish to withdraw from the contract.)

— To: Mihailo Lalic, Hauptstraße 53, 52399 Merzenich, Germany, email: support@checkmyvibecode.com

— I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract for the provision of the following service (*):

— Ordered on (*):

— Name of consumer(s):

— Address of consumer(s):

— Signature of consumer(s) (only if this form is notified on paper):

— Date:

(*) Delete as appropriate.

Cancelling a Pro subscription

Independently of the right of withdrawal, you can cancel your Pro subscription at any time in Account settings → Manage subscription. Boosts are one-off payments and do not renew.