Privacy

When you sign in with GitHub, we get your GitHub username, avatar, email addresses and the public profile details GitHub shares. We only ask to read your profile and email, never your repositories, and we don't keep your GitHub access token. Guests get a generated username and a cookie that remembers them.

We also keep what you do here: the sandboxes you create or join, your chat messages, turns and their history, reports you file, and the daily usage counts we use for limits.

Your username, avatar, bio and profile page are public. So is almost everything in a sandbox: anyone, signed in or not, can see its live preview, chat, members and turn history. Its code is visible to anyone who joins it.

Your email address is never shown to anyone else. Don't put anything in a sandbox or its chat that you wouldn't want public.

You sign in to Claude inside the sandbox, through Claude Code's own login. Your login stays in the sandbox under your own account there, separate from the other members. We don't log it or keep a copy anywhere else.

It's deleted when you leave the sandbox, when the sandbox is deleted or wiped, and when an idle sandbox shuts down. Your agent talks to Anthropic directly under your own account, so Anthropic's privacy policy covers those requests.

We use cookies to keep you signed in, protect against cross-site requests, remember guest accounts, list the sandboxes you opened recently, remember which welcome popups you've dismissed, and remember whether the sidebar is open.

There are no analytics, advertising or tracking cookies, and no third-party scripts.

Vibetown runs on Amazon Web Services (the site, database, file storage and logs) and Fly.io (the sandboxes). GitHub handles sign-in and stores each sandbox's code in a private repository we manage. Avatars load from GitHub's image servers.

We don't sell your data or share it with anyone else unless the law requires it.

We use your IP address briefly for rate limits and abuse prevention, like capping how many guest accounts one address can create. It isn't saved to your account. Server logs are kept for 14 days.

Chat is checked automatically for spam and blocked terms. Blocked and removed messages and reports are kept so we can review them.

We keep your data while your account exists. Deleting a sandbox deletes its code, chat, turns and members, though a copy of its database may remain in our backups. When a roulette sandbox is wiped, its code is deleted but its chat and turn history are kept.

There's no self-serve account deletion yet. Email nick@vibetown.social and we'll delete your account and the sandboxes you own. Questions about your data go to the same address.