Privacy Policy

What we don't collect

• ✓No account, email address or name — the tool has no sign-up.
• ✓No record of the URLs you scan. Scans are processed and discarded.
• ✓No tracking or advertising cookies, and no third-party analytics or pixels.
• ✓No browser or device fingerprinting. We stopped storing user-agent strings entirely.

Your IP address

Your IP address is read in memory to enforce rate limits (a small number of scans per minute) and to prevent abuse. It is held only for the few seconds that check takes and is never written to storage, logged, or shared. This is necessary for us to keep the service available — the legal basis is our legitimate interest in preventing abuse.

The one thing we store: feedback you submit

If a result looks wrong (or right) you can tell us. Nothing is sent unless you tick the acknowledgement box and press the button. When you do, we store:

• →The URL that was scanned
• →Whether you marked the result correct or incorrect
• →The tools our detector reported
• →Your optional free-text comment
• →A timestamp, and a note that you gave the acknowledgement

We use this for one purpose: measuring and improving detection accuracy. The legal basis is your consent, which you give by ticking the box. Please don't include personal or confidential information in the comment field — we ask you to confirm this before submitting.

Feedback is stored in a private Google Sheet, which means Google acts as a processor for that data. It is not sold, rented, or shared with advertisers.

Sites you scan

To answer your question we request the public page at the URL you enter, plus public resources it references (stylesheets, scripts, robots.txt, sitemap.xml), its public DNS records, and its public domain registration date via RDAP. We may also read a public Internet Archive snapshot if the site is unreachable. We only ever read publicly available information, and we don't attempt to log in or access anything private.

If you're a site owner

You can ask us not to scan your domain, or ask us to delete feedback rows that mention it. Add a Disallow rule for IsThatVibeCodedBot in your robots.txt and we will stop scanning it, or get in touch and we'll handle it manually.

Your rights

Because we don't hold accounts or scan logs, there is normally no personal data of yours for us to show you or delete. If you submitted feedback and want it removed, or you have any question about data we hold, contact us and we'll action it. Depending on where you live you may also have rights to access, correct, delete, or object to the processing of your personal data, and to complain to your local data protection authority.

Children

This service is not directed at children under 13 and we don't knowingly collect their data.

Changes

If we change what we collect, we'll update this page and the date at the top. Material changes to how feedback is used will be reflected in the acknowledgement text too.

Contact

For privacy requests, takedowns, or corrections, reach out through the contact details on our GitHub repository or the site footer. Please include the URL involved so we can find the relevant row quickly.