DRAFT for review. This is a plain-language starting point, not legal advice. Have it checked before launch.

Privacy

Last updated 15 October 2026

VibingNow is a live globe of people building with AI. This page says what we collect, why, and how to get rid of it. The short version: we collect numbers about your AI coding, never your prompts, code or files, and we only ever know your city.

What we collect

• Your profile: a handle, the city you pick, a photo you upload or an avatar you build, optional X and GitHub/website links, and whether you chose “just hang out”. When you sign in with Google, X, GitHub or LinkedIn we read your name and profile picture from them, plus an account ID so we can recognise you next time.
• From your computer, if you connect your AI tool: after each Claude Code or Codex reply, the hook sends exactly four things: a token count, the model name (e.g. “claude-opus-4”), active minutes, and four counters (errors, retries, failed tests, interrupts). From these we work out your mood, burn rate, hours and streak. The connect page shows you the exact message.
• Things you do on the site: chat messages you send, nudges, who you block or mute, reports you make, and your sound settings.
• To keep you signed in: a session cookie. To link your computer: a device token, which we store only as a scrambled (hashed) version, plus the computer’s name.

What we never collect

• Your prompts, code, file names, file contents, API keys or anything you type into your AI tool. The server rejects any message that contains more than the four numbers above.
• Your exact location. To suggest your city we read the city your hosting provider attaches to the request (for example Vercel’s geo headers). We don’t look up your IP address with anyone, we don’t store it, and we only save the city you confirm. On the map you sit on that city, never closer.

What other people see

Everyone can see your handle, face, city, local time, links, today’s tokens and hours, mood, burn, favourite model and streak. Room chats are visible to everyone; 1:1 chats only to the two of you. If you choose “just hang out”, no numbers are tracked or shown.

Who helps us run it

• Supabase stores the data and handles sign-in.
• Vercel hosts the site.
• Google, X, GitHub and LinkedIn, only if you sign in with them.
• Google Fonts serves the typefaces, so your browser asks Google for them.

We don’t sell your data and don’t run ads trackers. If we ever publish statistics (like “most popular model this week”), they are totals across everyone, never about you.

Keeping and deleting

• Your profile and numbers stay until you delete your account.
• Messages you send are kept until you delete your account (each chat shows its latest 50).
• Delete everything any time: open your own card on the map and choose “Delete my account”. That removes your profile, face, numbers, the messages you sent, your nudges and your connected computers. To take the hook off your computer too, run npx vibingnow disconnect, which also puts your Claude Code and Codex settings back exactly as they were.

Your rights and questions

You can ask for a copy of your data, a correction, or deletion. Email contact@loomfactor.com.