Privacy policy.
The short version: local mode collects nothing, the website uses cookie-based analytics only with your consent, and your data lives in EU data centres.
Data we collect
Very little, and only with consent.
Local mode
Vibeflow runs locally and stores your tasks in a
.vibeflow/ folder inside your own repository.
That data never leaves your machine, and we cannot see it. No account,
no telemetry, no cloud sync.
This website
When you visit vibeflow.tools we may collect basic, aggregate analytics — page views, referring site, device type and approximate location. This helps us understand what content is useful. It is collected only if you accept the cookie banner (we ask every visitor in the EU; the banner appears only there).
The CLI npm package
The CLI runs entirely on your machine. It sends no usage data anywhere.
Cookies
The cookies we use.
| Cookie | Purpose | Consent |
|---|---|---|
vf_cookie_consent |
Records your consent choice for analytics cookies. | Always stored locally, never shared. |
Google Analytics (_ga) |
Aggregate visitor statistics. | Loads only after you accept. |
| PostHog | Product usage analytics on the website. | Loads only after you accept. |
You can change your mind at any time by clearing cookies and local storage for this site — the banner will ask you again.
Service providers
Who we work with.
| Provider | What they do | Region |
|---|---|---|
| Cloudflare | Hosting, CDN and object storage. | EU |
| Neon | PostgreSQL database. | EU (eu-west-2) |
| Google Analytics | Aggregate visitor statistics (consent-gated). | — |
| PostHog | Product analytics (consent-gated). | EU |
We do not sell your data. We do not use it for advertising. Analytics data is aggregated and never tied to a person.
Your rights
You stay in control.
- Access and export — your tasks are plain files in your repository; take them anywhere.
- Correct — fix any data about you at any time.
- Delete — ask us to remove analytics data; we will delete it (analytics is anonymous, and any locally stored data is deleted by you — it is on your machine).
- Object / withdraw consent — decline analytics cookies with the banner; nothing loads.
Contact
Questions about your data?
Open an issue on GitHub and we will get back to you.
Last updated: 19 September 2026.