Last updated: October 8, 2026

What data we collect

Account information — your email address when you sign up or sign in (managed by Supabase Auth).
Design data — the text prompts you submit and the generated designs (blueprints, cut lists, connectors, shopping lists) stored in our database.
Purchase records — if you buy an order pack, we keep which design it unlocks, the amount, the currency, the date, and the Stripe checkout reference. We never see or store your card number.
Usage data — basic analytics such as page views and feature usage to improve the product. We do not use third-party tracking cookies.

How we use your data

To authenticate you and manage your account.
To generate and store your designs.
To improve Vibecrafting's features and reliability.

AI processing (Anthropic / Claude)

When you submit a design prompt, it is sent to Anthropic's API to generate your blueprint. Anthropic's data usage policies apply to that processing. We do not use your prompts to train models. Refer to Anthropic's Privacy Policy for details.

Payments (Stripe)

Designing and checking a build are free. When you buy an order pack, checkout happens on Stripe's own page. Stripe collects your payment details and the email for your receipt, processes the payment, and tells us whether it went through. Card details go to Stripe directly and never reach our servers. Stripe's handling of that data is covered by Stripe's Privacy Policy.

Authentication & cookies

We use Supabase for authentication. Supabase sets essential session cookies to keep you signed in. We do not set any third-party advertising or tracking cookies.

Data retention

Your designs are stored as long as your account is active. You can delete individual designs at any time from the “My Designs” page. If you wish to delete your account and all associated data, contact us at the email below.

Data security

All data is transmitted over HTTPS. We use Supabase's row-level security to ensure you can only access your own designs. Our application enforces strict Content Security Policy headers and follows OWASP best practices.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond within 30 days.

Contact

Questions about this policy? Email us at privacy@brokenbranch.dev.