Privacy Policy
The short version: Ms. Vibecode is a local-first desktop app. Your provider API keys and everything you type into it are stored — encrypted — on your own computer. They are never uploaded to us, and we don't run a server that could receive them. We don't have accounts, the app doesn't track what you do, and we can't see your data. (The marketing website uses consent-based analytics — see "The website" below.)
Who this covers
This policy describes how the Ms. Vibecode desktop application ("the app") and the msvibecode.com website ("the site") handle information. "We" refers to the maker of Ms. Vibecode.
What the app stores, and where
Everything the app saves lives on your machine, in your user data folder (on macOS, ~/Library/Application Support/Ms. Vibecode/). This includes:
- Your projects and the list of services you add to them.
- Your provider API keys, encrypted with AES-256-GCM. The encryption key itself is held in your operating system's secure keychain (with a locked-down local file as a fallback), not alongside the data.
- The most recent status result for each service (e.g. "healthy", "rate limited").
Because there is no cloud component and no account, this data does not leave your device except in the specific cases below.
Network connections the app makes
The app is quiet by default. It only reaches the internet to do three things:
- Check your services. When you run a status check, the app sends your key directly to that provider's own API (for example, GitHub or OpenAI) to confirm the key works. The key goes only to the provider it belongs to — never to us.
- Check for app updates. The app asks GitHub's public releases page whether a newer version of Ms. Vibecode exists, and downloads it if so. This is a normal request to GitHub; it does not include your data.
- Activate your license. If you buy a license, the app validates your license key with our payments provider, Lemon Squeezy. This exchanges only your license key — not your projects or provider keys.
Information we receive
From normal use of the app, we receive nothing — no telemetry, no analytics, no crash reports, no usage data. We have no server that your app data flows to.
The one exception is payment: if you purchase a license, it is processed by Lemon Squeezy, who acts as the merchant of record. They collect the information needed to take payment and issue a license (such as your email and billing details) under their own privacy policy. We receive a record of the sale and your license status, but we never see your full card details. See Lemon Squeezy's privacy policy.
The website
The msvibecode.com marketing site is a static page hosted on Vercel. Downloads are served from GitHub. Standard server logs (such as IP address and request time) may be created by these hosting providers for security and reliability, under their respective policies.
Analytics & cookies. The website uses Google Analytics 4 to understand, in aggregate, how visitors find and use the site — for example, which pages get viewed. It loads only after you click "Accept" on the cookie banner; if you decline or ignore the banner, no analytics scripts run and no analytics cookies are set. When enabled, Google Analytics sets cookies and processes usage data (with your IP address anonymized) under Google's privacy policy. We use it only for anonymous, site-level statistics — never for advertising, and we run no third-party ad trackers. You can change your choice anytime by clearing this site's cookies, or opt out globally with the Google Analytics opt-out browser add-on.
Your control
You are always in control of your data because it is on your machine:
- Delete any key or project from within the app at any time.
- Use Settings → Danger zone → Wipe all data to erase every project, key, and custom service from your device.
- Uninstalling the app and removing its user data folder removes everything.
Children
Ms. Vibecode is a developer tool intended for adults and is not directed at children under 13.
Changes to this policy
If this policy changes, we'll update the date at the top and post the new version here. Continuing to use the app after a change means you accept the updated policy.
Contact
Questions about privacy? Email hello@msvibeco.de.