Privacy Policy

Last updated — February 2026

1. Introduction

This Privacy Policy describes how VibeReady ("we", "us", "our") collects, uses, and protects your information when you visit vibeready.sh or purchase our products. By using our website or services, you agree to the practices described in this policy.

We believe in transparency and want you to understand exactly what data we collect, why we collect it, and how we handle it.

This Privacy Policy is part of and subject to our Terms of Service.

2. Information We Collect

Information You Provide

When you make a purchase, create an account, or contact us, you may provide us with:

  • Name
  • Email address
  • Billing information

Payment Information

All payment processing is handled entirely by Polar and Stripe. We do not store credit card numbers or payment credentials on our servers. Your payment details are transmitted directly to and managed by these processors.

For more information on how your payment data is handled, please refer to Polar's privacy policy and Stripe's privacy policy.

Automatically Collected Information

When you visit our website, our servers may automatically collect standard log information, including:

  • IP address
  • Browser type and version
  • Operating system
  • Referring URL
  • Pages visited
  • Date and time of visit

This is standard server log information used for security and operational purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Process and fulfill your purchases
  • Deliver product access (GitHub repository invitations)
  • Send transactional emails (purchase confirmations, access instructions)
  • Respond to support requests and inquiries
  • Improve our website and products
  • Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for monetary or other valuable consideration.

We do not use your information for advertising purposes.

4. Third-Party Services

We use the following third-party services in connection with our website and products:

  • Polar (polar.sh) — Payment processing and order management. Privacy policy
  • Stripe (stripe.com) — Payment infrastructure used by Polar. Privacy policy
  • Resend (resend.com) — Transactional email delivery. Your email address and name are shared with Resend to deliver purchase confirmation and onboarding emails. Privacy policy
  • Google Fonts (fonts.google.com) — Typography (Inter and JetBrains Mono fonts). When you visit our site, your browser may make requests to Google's servers to load these fonts. Privacy policy
  • GitHub (github.com) — Product delivery. Your email address or GitHub username is shared with GitHub to grant repository access. Privacy policy
  • Plausible Analytics (plausible.io) — Privacy-friendly website analytics. Plausible does not use cookies or create user profiles. While it processes IP addresses for geolocation, it does not track individual visitors. All data is aggregated. Data policy

Each of these services has its own privacy practices. We encourage you to review their respective policies.

5. Cookies & Tracking

We use minimal cookies on our website:

  • Essential cookies — May be used for basic site functionality, such as session management during checkout.
  • Analytics (cookie-free) — We use Plausible Analytics for website usage statistics. Plausible is a privacy-friendly analytics tool that does not use cookies and does not collect any personal data. No consent banner is required.
  • No advertising cookies — We do not serve ads or use advertising trackers.
  • Google Fonts — Loading fonts from Google's CDN may result in Google receiving your IP address and browser information.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may affect site functionality.

6. Data Retention

We retain your information as follows:

  • Purchase records — Retained as long as necessary for legal, tax, and accounting obligations.
  • Support correspondence — Retained for a reasonable period to provide ongoing support and improve our services.
  • Server logs — Retained for a limited period for security and operational purposes.

You may request deletion of your personal data at any time. See the Your Rights section below for details.

7. Data Security

We implement industry-standard security measures to protect your information, including SSL/TLS encryption for all data in transit. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

We do not store payment credentials on our servers. All payment data is handled by our payment processors (Polar and Stripe), which maintain their own security standards and certifications.

In the event of a data breach affecting your personal information, we will notify affected users via email without undue delay and disclose the nature of the breach, data affected, and steps taken to mitigate it.

8. Your Rights

For All Users

Regardless of your location, you may request access to, correction of, or deletion of your personal data by contacting us at legal@vibeready.sh.

For EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

Our legal basis for processing your personal data includes:

  • Contract performance — Processing necessary to fulfill your purchase and deliver products.
  • Legitimate interests — Site improvement, security monitoring, and fraud prevention.
  • Legal obligations — Tax compliance and record-keeping requirements.

You also have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

For California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

Categories of personal information we collect, as defined by the CCPA: (a) Identifiers (name, email address), (b) Commercial information (purchase history), (c) Internet or electronic network activity (IP address, browser type, pages visited).

  • Right to know what personal information is collected about you
  • Right to delete your personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written authorization from the consumer.

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

To exercise any of these rights, contact us at legal@vibeready.sh. We will respond to your request within 30 days.

9. Children's Privacy

Our website and products are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly.

If you believe we have collected information from a child under 13, please contact us at legal@vibeready.sh.

10. International Transfers

Our services are operated in the United States. If you are located outside the United States, please be aware that your information may be transferred to and processed in the US, where data protection laws may differ from those in your country.

By using our website or purchasing our products, you consent to this transfer. We take appropriate safeguards to protect your information during any such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page with an updated "Last updated" date at the top. We encourage you to review this policy periodically to stay informed about how we protect your information.

Your continued use of our website after any changes to this policy constitutes your acceptance of the updated policy.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, you can reach us at:

You can also reach us through our contact page.