Privacy policy
Last updated September 9, 2026
VibeAtlas publishes an editorial index of real products built with AI coding tools. This policy describes what we collect, why we collect it, and the choices you have. The short version: an account for submissions, the data of your listing, and basic visit statistics — nothing more.
The data we collect
- Account data. When you register we store your email address, name, and a PBKDF2 hash of your password with a random salt. We never store the plaintext password. Registration signs you in immediately — there is no email confirmation step — and the account records when it was created.
- Listing data. What you submit: project name, website URL, tagline, description, logo, screenshot, pricing type, platform, build tools, categories and tags, and any source or open-source URLs. A listing is public, and this data appears in the directory.
- Backlink records. For free listings we check the reciprocal link on the page you provide and keep each check's result: HTTP status, resolved URL, whether a matching anchor was found, its rel value, and how long the link has been missing.
- Visit statistics. We track aggregate traffic ourselves: the path visited, referrer, response status, a hash of your IP with user agent and language (the IP itself is never stored), and whether the user agent looks like a crawler. These are written to daily files and used to understand reach. No third-party analytics or ad network is involved.
Cookies and local storage
Signing in sets one cookie, vibeatlas_session — httpOnly, SameSite=Lax, sent over HTTPS in production, valid for seven days. Signing out removes it. The light or dark theme is kept in your browser's localStorage under vibeatlas_theme and is never transmitted to the server. The site sets no advertising, analytics, or cross-site cookies and loads no third-party scripts.
How the data is used
To run the directory: publish and review listings, verify reciprocal links, and keep your signed-in session working. This site does not send email — no verification, password-reset, or notification emails — so every account action takes effect through the session. To operate the site: visit statistics tell us which pages are read and which are crawled, so the record serves actual traffic.
What we do not do
We do not sell, rent, or trade data; the directory is not ad-supported and has no affiliate relationship with the products it lists. We do not combine visitor statistics with data from other sites, and we do not merge them into profiles of individual visitors.
Where data lives
The directory runs on a managed server. Structured data — accounts, listings, backlink checks — lives in a local SQLite database. Uploaded and generated images are stored on the same server; visit statistics are written to daily files at the origin.
Retention
Account and listing data stay until the account is closed or the listing is removed. Backlink check records are kept for as long as a listing is active, then archived — they exist to make delisting decisions traceable. Visit statistics remain as daily aggregates and are not used for anything beyond the summary dashboard.
Your rights
You can correct account details in account settings. To close an account, remove a listing, or request a copy of the data we hold, write to [email protected] with the email address on the account; we will act on the request as soon as we can.
Children
The directory is a reference for builders and is not directed at children under 13. We do not knowingly collect data from children; if you believe a child has registered, contact us and we will remove the account.
Changes
Material changes are posted here with a new date, and the date at the top of this page always shows the current version. These terms are covered by the terms of service for everything else about using the directory.