Extension Privacy Policy

1. Extension covered by this policy

This privacy policy applies to the Vibe Coding Product Chrome extension. The extension lets you view and open your favorited VCP (Vibe Coding Product) items from the browser and connect to the VibeCoding Product website.

2. Data we collect and where it is stored

Data stored on your device (Chrome storage)

The extension uses Chrome’s storage.local to keep:

• Login token — After you sign in, an authentication token is stored locally so the extension can load your favorites.
• Optional API base URL and debug flag — Only when you enable “debug mode” in the extension options: a custom API address (e.g. for development) and a debug flag. In normal use, the extension uses the default API at vibe-coding-product.com and does not store a custom URL.

We do not collect your browsing history or any data from other websites.

Data sent to our servers

When you use the extension:

• Login — If you sign in through the extension options, your email and password are sent to our backend (default: https://vibe-coding-product.com) for authentication. This is the same login flow as on the website.
• Favorites — The extension requests your saved favorites and can add or remove favorites by calling our API. Only the data needed for these actions is sent (e.g. authentication token, item identifiers).

3. How we use the data

We use the data only to:

• Authenticate you and show your favorited Vibe Coding Product items in the extension.
• Let you open those items and manage favorites (add/remove) from the extension.

We do not use extension data for advertising, profiling, or any purpose other than providing this functionality.

4. Disclosure and sale of data

We do not sell or rent your data to third parties. Data sent to our servers is processed only to operate the VibeCoding Product service (including the extension). We do not share your personal data with third parties for their marketing or other purposes.

5. Security

Communication between the extension and our servers uses HTTPS. Your password is handled by our backend using standard authentication practices. The authentication token is stored only on your device in Chrome’s local storage and is not transmitted except to our own API for authentication.

6. Data retention and your choices

• On your device — Data in the extension (token, optional debug settings) is removed when you uninstall the extension or clear the extension’s storage. You can also log out in the extension options to stop using the stored token.
• On our servers — Account and favorites data on our servers is subject to the main website’s privacy policy. You can manage your account and data on the VibeCoding Product website.

7. Contact

For privacy-related questions about this extension, you can contact us at [email protected].

8. Changes to this policy

We may update this privacy policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically.