Privacy Policy

Effective date: October 23, 2026  ·  VITARS S.R.L.

EasyVibr is operated by VITARS S.R.L., a company registered in Romania. This policy explains what information we collect, how we use it, and the commitments we make about your data.

1. The short version

We collect only what is strictly necessary to run the service. We never sell your data, never share it with third parties for advertising, and never use your projects, files, or API keys for any purpose other than serving them back to you.

2. Information we collect

• Email address — used only for passwordless authentication (magic-link sign-in). We do not use it for marketing unless you explicitly opt in.
• Projects and files — the HTML, CSS, and JS you upload or paste. These are stored securely to power the editor and preview features.
• API keys — Gemini, DeepSeek, Mistral, Groq, and OpenRouter keys you add in Settings. Keys are encrypted at rest and are used solely to make AI requests on your behalf. We never read, share, or log them beyond what is required to forward the request.
• Usage data — basic, anonymous request logs (timestamps, response status codes) for operational monitoring. No personal identifiers are stored in logs.

3. How we use your information

• Authenticate you and maintain your session.
• Store and serve your projects and deployments.
• Forward AI API requests using the keys you provide.
• Diagnose and fix technical issues.

We do not use your content to train AI models, build advertising profiles, or share data with any third party for commercial purposes.

4. Data storage and security

Your data is stored on Cloudflare's infrastructure (R2 object storage and KV). Cloudflare's data centers are located globally; their privacy practices are described at cloudflare.com/privacypolicy. We apply encryption in transit (HTTPS/TLS) and at rest for sensitive fields such as API keys.

5. Data retention

Your account and all associated projects are retained for as long as your account is active. You may delete individual projects at any time from within the app. To delete your entire account and all associated data, email us at [email protected] and we will process the request within 30 days.

6. Cookies and local storage

We use a single session cookie to keep you logged in. No tracking or advertising cookies are set. API keys are stored in your browser's localStorage and remain on your device — they are transmitted to our servers only when making AI requests.

7. Third-party AI providers

When you use your own API key, your prompt and project content are sent directly to the respective AI provider (Google, DeepSeek, Mistral, Groq, or OpenRouter) under your account. Review their privacy policies for details on how they handle your data. We do not retain AI prompt or response content beyond the duration of the request.

8. Your rights (GDPR)

As a company based in the European Union, we comply with the General Data Protection Regulation (GDPR). You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Request erasure ("right to be forgotten").
• Object to or restrict processing.
• Data portability.

To exercise any of these rights, contact us at [email protected].

9. Children

EasyVibr is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

If we make material changes, we will update the effective date above and notify you by email at least 14 days before the change takes effect.

11. Contact

VITARS S.R.L. — [email protected]