Privacy policy

PwnMyVibeCode needs no account, email address or name. Here is everything we handle when you use it.

What we store

• Your check results. The address you submitted and the report we produced, kept for 30 days so your share link works, then deleted.
• A rate limit counter. To stop abuse we count checks per visitor using a one-way hash of your IP address that changes every day. We don't store the IP address itself.
• Server logs. Our host keeps standard request logs for a short period for security and debugging.

What stays in your browser

Your recent sites, their grades and your preferred explanation style are saved in your browser's local storage. They are never sent to us. Clearing your browser data removes them.

Services that help run the site

• Railway hosts the site.
• Supabase stores reports and rate limit counters.
• Anthropic writes the short summary at the top of a report. It receives the list of findings for the checked site, never anything about you.
• Cloudflare Turnstile may run a quick automated human check to keep bots out. Cloudflare's own privacy policy covers that check.

We don't sell data, run ads, or use advertising trackers.

Your choices

To delete a report before it expires, email hello@pwnmyvibecode.com with its share link.

Changes

If this policy changes, we'll update the date at the top of this page.