This notice covers the VibeShield website and the analytics cookies in the VibeShield app (engine.vibeshield.nl). For everything else, the app has its own notice. VibeShield is the controller for the data described here.
What we collect
The only personal data this site asks for is the email address you enter in the news signup form, together with the time you signed up and the fact that it came from this website. We do not ask for a name, and we do not build a profile. If you consent to analytics cookies, we also record how you use the site (see below).
Why, and on what basis
We use your address to send VibeShield news, product updates and practical app security tips. The basis is your consent, which you give by submitting the form. You can withdraw it at any time with the unsubscribe link in every email; after that we send nothing more.
Who processes it
- Supabase stores the list in our database.
- Resend delivers the emails on our behalf.
- Lovable hosts this site and records basic, aggregated technical analytics such as page views.
- Microsoft (Clarity) measures how visitors use the site, only with your consent.
- Google (Google Analytics) counts visits and page views, only with your consent.
We do not sell or share the list with anyone else. This site sets no advertising cookies, and analytics cookies only if you consent to them. If you pick a display style yourself (Aubergine or Cobalt), we remember it in a single functional cookie on vibeshield.nl, so the website and the VibeShield app show the same style. It holds only the style and when you chose it, nothing about you.
Analytics cookies on this website
If you click 'Accept' on the cookie notice, we use two services to see how visitors use the site. Google Analytics counts visits and page views and shows where visitors come from. Microsoft Clarity shows where visitors click and how far they scroll, including as heatmaps and recordings of a visit. Both receive technical data such as your browser, device and IP address. What you type in the newsletter form is not recorded. Google and Microsoft may process this data outside the EU, under the EU-US Data Privacy Framework.
The basis is your consent. If you click 'Decline', Google Analytics and Clarity are not loaded. You can change your choice at any time via 'Cookie settings' at the bottom of every page. If you withdraw your consent, both stop and we delete their cookies. Google Analytics keeps data about you as a visitor for 2 months. Clarity keeps recordings for 30 days and other data for up to 13 months.
Analytics cookies in the VibeShield app
If you click 'Accept' on the cookie notice in the app, we use PostHog to measure how the app is used, so we can improve it. PostHog processes this data on our behalf and stores it in the EU. The basis is your consent. If you click 'Decline', PostHog is not even loaded.
We record which pages you visit and what you click, linked to your user ID, plus what PostHog receives about your browser and device by default, including your IP address. We never record your screen, we do not keep the text of what you click, and we strip tokens and codes from addresses before anything is sent. Your code, scan results and secrets therefore never reach PostHog.
You can change your choice at any time in the app, under Profile → Analytics cookies. The choice applies per browser. If you withdraw your consent, that browser sends nothing more. If you want us to delete the data already collected, just ask.
How long
Until you unsubscribe. When you do, we keep a record that you opted out so we do not mail you again by mistake. Ask us and we delete the address entirely.
Your rights
You can ask what we hold about you, have it corrected or deleted, and object to its use. Reply to any email we sent you, and we will handle it. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
If this notice changes in a way that matters to you, we say so in the next email we send.