Privacy

What this covers

This policy describes lockyourvibe.com. The free scan does not ask you to create an account.

Scan results

When you scan a URL, the server fetches that public site, builds a redacted report, and returns a share link. The free scan does not write a scan database. The link itself contains the redacted findings (compressed). Anyone with the link can read that report. Do not share it if the redacted evidence is still sensitive.

A paid full report is shown only after Stripe says that checkout session is paid. The redacted report may be kept, keyed by that session id, so a refresh does not scan again. Anyone with the session link can open that paid report. The raw secret values are still redacted.

We design the report so raw secret values are not included. Treat a leaked key as public anyway and rotate it. The target site you scan will see our requests in its own logs, including the user agent LockYourVibeScanner.

IP addresses

The scan and newsletter routes keep an in-memory count of requests per IP address so one visitor cannot hammer the scanner. That count lives in the server process and is not written to a database in this version. On a host like Vercel, memory is not shared across every instance, and it disappears when the instance does.

Newsletter

If you join the launch list, we store your email address. In local development that is a JSON file behind a small storage interface. In production, set NEWSLETTER_WEBHOOK_URL to hand the address to your own email tool, or replace the store. We do not sell the list. Reply to the email and ask to be removed.

Cookies

The app does not set a tracking cookie for the scan. The host platform may keep operational logs. Stripe Checkout handles the card payment, and the Stripe privacy policy covers that payment page.

Sharing

We do not sell personal information. A webhook you configure receives the email you submitted. A hosting provider processes the traffic required to run the site.

Contact

Privacy questions: hello@lockyourvibe.com.