Privacy Policy

VibeRoulette is a non-commercial hobby website for discovering vibe-coded and AI-built websites. The site is available at https://viberoulette.dev.

This policy explains what information we collect from visitors, signed-in users, and people who submit websites for review.

Who operates this site

VibeRoulette is operated by the project owner of viberoulette.dev. For privacy questions or deletion requests, contact: privacy@viberoulette.dev.

What we collect from visitors

When you browse VibeRoulette, we may process basic technical information needed to run the site, such as request time, browser type, device type, approximate country, pages requested, and security logs generated by our hosting provider.

If you accept optional analytics cookies, we also collect first-party analytics events such as Roulette starts, framed site views, approximate time visible in the Roulette frame, Passes, Smashes, favorites, shares, email-link actions, and Teleport clicks. These analytics help us understand which listed websites receive traffic and engagement from VibeRoulette.

We do not use Meta Pixel, Google Ads cookies, retargeting pixels, or third-party advertising trackers in the MVP.

What we collect from signed-in users

If you sign in with email, Supabase Auth processes your email address and session information so you can save favorites and Smashes across devices. If you choose to sync local favorites or Smashes to your account, those saved site IDs are stored with your account.

We do not silently sync local browser data into your account. You will be asked before local favorites or Smashes are synced.

What we collect when you email yourself a site

If you use “Email me this site” or “Email me my favorites,” we use your email address to send the requested message. We do not subscribe you to marketing emails. We keep only minimal delivery records and avoid retaining plaintext email addresses where possible.

What we collect from website submitters

If you submit a website, we collect the URL, name, category, short description, pricing tier, owner or creator name/handle, submitter email, AI/vibe-coding note, embedding permission choice, optional source code URL, optional tags, and any optional metadata you provide.

If your submission is approved, public metadata such as the website URL, name, description, category, pricing tier, owner name/handle, tags, and source code URL may be published on VibeRoulette.

Your submitter email is used for moderation, abuse prevention, and submission-related contact. It is not published unless you explicitly provide it as public contact information.

Framing checks

When a website is submitted, VibeRoulette checks whether it appears technically able to load inside an iframe. This check looks at public HTTP headers such as X-Frame-Options and Content-Security-Policy. If a site cannot be framed, it can still be approved for the Teleport feature, but it will not be eligible for Roulette mode unless an admin later verifies that framing is allowed.

Cookies and local storage

We use essential storage to remember your cookie choice, keep you signed in, and save favorites or Smashes locally when you explicitly use those features.

Optional analytics cookies are used only if you accept them. You can change your choice at any time from “Cookie settings” in the footer.

See the Cookie Policy for a detailed list of cookies and storage.

Why we process data

We process data to operate the website, protect it from abuse, review submissions, provide favorites and email features, understand which websites receive traffic from VibeRoulette, and improve the product.

Service providers

We use:

• Vercel for hosting;
• Supabase for database, authentication, and storage;
• Resend for transactional emails.

These providers may process data on our behalf to deliver the service.

International transfers

Some providers may process data outside your country or region. Where required, appropriate safeguards should be used by those providers. Check the providers’ current privacy documentation for details.

Retention

Default retention targets:

• raw analytics events: up to 6–12 months, then aggregated or deleted;
• server/security logs: as short as reasonably possible, typically 7–30 days where controlled by us;
• email-send records: 30–90 days unless needed for abuse prevention;
• submissions: kept while a site is listed; declined submissions may be retained for up to 12 months for spam and duplicate prevention;
• account favorites and Smashes: until you remove them or delete your account.

Your choices and rights

You can reject optional analytics cookies, withdraw consent, remove local favorites/Smashes from your browser, request deletion of account-linked data, or request correction/removal of submitted website metadata.

To make a request, contact privacy@viberoulette.dev.

Children

VibeRoulette is not aimed at children. Do not submit personal information if you are not old enough to use online services in your country without parental consent.

Changes

We may update this policy when the product changes. If changes materially affect optional analytics cookies, we will ask for consent again where required.