Privacy Policy

Last updated: 2026-10-11

Vibes Flow is a Chrome extension that automates batch generation on Vibes.ai (a Meta product). This policy describes what data the extension accesses, stores, and transmits.

Data we access

The extension only accesses data on domains you have authorized:

• vibes.ai — to read the active project ID from the URL and submit generation requests on your behalf (image, video, image-to-video pipeline).
• *.fbcdn.net — to download generated media files you explicitly request.
• *.meta.ai — fallback for content hosted on Meta's CDN.

The extension uses your existing browser session cookies for these domains to authenticate API requests. It does not collect, store, or transmit your cookies anywhere — they remain in Chrome's cookie store and are used only to make authenticated requests to Vibes.ai on your behalf.

Data we store locally

All data is stored in Chrome's local storage (chrome.storage.local) and/or Chrome's sync storage (chrome.storage.sync) and never leaves your device except where explicitly described:

• Generation queue — pending, in-progress, and completed jobs (prompts, status, timestamps, output URLs).
• Media manifest — a local index of files downloaded to your ~/Downloads/vibes-flow/ folder (filenames, paths, metadata).
• User settings — preferred download folder name, delay between submits, notification preferences.
• Account and license data — the extension stores the activation token and account state locally, then validates the plan and Free quota against our license server.
• Usage state — the server records authenticated Free submit reservations to enforce the rolling 24-hour limit. The landing page also records privacy-minimized funnel events such as install-click and checkout-start events. When configured, PostHog receives only anonymous allowlisted funnel events and low-cardinality properties (locale, plan, billing period, currency, and source). Autocapture, automatic pageview/pageleave, session recording, and surveys are disabled. We never identify visitors or send prompts, email, activation tokens, generated media URLs, full URLs/query strings, Stripe IDs, or Supabase IDs. Analytics is skipped when DNT is enabled or vibes_flow_analytics_opt_out is set to 1 in local storage.

Data we transmit

• Vibes.ai API requests — generated prompts and configuration are sent to Vibes.ai exactly as you submitted them. This is required for the extension to function.
• Account and quota validation — the extension sends its activation token to https://vibesflow.vercel.app/api/license/check and, for Free submits, reserves usage through /api/usage/reserve. The server uses this to identify the account, plan and rolling quota.
• Stripe checkout and webhooks — when you purchase a subscription, Stripe processes payment and sends billing status to our server. We do not store payment card details.

Data we do NOT collect

• Your name or email through the extension itself. If you activate an account or start checkout, the account or billing flow may process the email you provide.
• Browsing history outside of vibes.ai.
• Cookies from any domain.
• Generated prompt content for funnel analytics or payment card details.
• Replay recordings, autocaptured clicks, or behavioral heatmaps.

Your rights

You can:

• Delete all extension data at any time by uninstalling the extension or clicking "Reset settings" in the sidepanel.
• Export your media manifest from chrome.storage.local via DevTools.
• Cancel your subscription at any time from the Stripe customer portal (link sent in your purchase receipt email). Cancellation takes effect at the end of the current billing period.

Children

Vibes Flow is not directed at children under 13. We do not knowingly collect data from children.

Changes

We will update this policy as the extension evolves. Material changes will be announced in the extension's changelog and via the "What's new" tab in the Chrome Web Store.

Contact

For privacy questions: privacy@vibesflow.vercel.app

Open source

The extension's data handling is auditable in the source code at ~/clawd/projetos/vibes-flow/. You can inspect every network request and storage operation before installing.