Privacy policy

1. Information we collect

Information you give us. When you create an account we store your email address and the username you choose. If you sign in with GitHub or Google instead of a password, that provider confirms your identity and gives us your email address — we never receive your password and cannot act on your account there.

Your preferences. Your experience level, how dense you like listings to be, and whether you have completed onboarding.

Things you save and do. Bookmarks (what you saved, the folder you filed it under, and when), recently viewed items (what you opened and when), and your progress through a walkthrough (which step you reached and which boxes you ticked).

Outbound clicks. When you click through to a tool’s website we record that a click happened — which tool, and when. Nothing else. That record contains no user identifier, no IP address and no device information, and it is not linked to your account whether you are signed in or not.

Server logs. Our host produces ordinary web-server logs, which include IP addresses and browser user agents. See section 4.

2. How we use it

To give you an account and keep you signed in; to show you your own bookmarks, history and walkthrough progress; to tailor which guides we surface to the experience level you selected; to understand in aggregate which tools people find useful; and to keep the site running, secure and free of abuse.

We do not use your information to build an advertising profile, and we do not make automated decisions about you that produce legal or similarly significant effects.

3. Cookies and tracking

There is no third-party analytics or advertising technology on this site. No Google Analytics, no advertising or retargeting pixels, no session recording, no cross-site tracking.

The only cookies we set are the ones our authentication provider needs to keep you signed in and to keep that session secure. They are strictly necessary for the site to work, which is why you are not asked to consent to them. Signing out clears them.

4. Who else handles your information

We do not sell your personal information, and we do not share it for advertising. We use two service providers, each acting on our instructions:

• Supabase — hosts our database and handles sign-in and account security.
• Vercel — hosts and serves the site. Like any web host, Vercel processes request logs, including IP addresses, in order to deliver pages and protect the service against abuse. We do not store IP addresses in our own database.

If you sign in with GitHub or Google, that provider necessarily learns that you signed in to Viberation. Their handling of that is governed by their own privacy policy.

We may also disclose information where we are legally required to, where it is necessary to establish or defend a legal claim, or to protect the safety of our users.

5. How long we keep it

Your profile, bookmarks and walkthrough progress are kept until you delete them or close your account. Your recently-viewed list is capped automatically — older entries are removed as new ones arrive, rather than accumulating indefinitely. Anonymous click records are kept as aggregate statistics; because they identify nobody, they are not removed when an account is deleted.

6. Security

Traffic to the site is encrypted in transit. Access to your personal records is enforced in the database itself rather than only in application code, so bookmarks, history and walkthrough progress are readable only by the account that owns them. Passwords are handled by our authentication provider and are never stored by us in a readable form.

No service can promise perfect security, and we do not. If a breach affects your information we will notify you and any relevant regulator as required by law.

7. International transfers

Our providers operate globally, so your information may be stored or processed in a country other than the one you live in, including the United States. Where the law requires a safeguard for such transfers, we rely on our providers’ standard contractual protections.

8. Your rights

You can access and correct most of your information yourself: your username and preferences on your profile page, and your bookmarks wherever they appear.

Depending on where you live, you may also have the right to obtain a copy of your information, have it corrected or deleted, object to or restrict how we use it, ask for it in a portable format, or withdraw consent. Residents of California and other US states with comparable laws have the right not to be treated differently for exercising these rights — and note that we do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of.

There is currently no self-service delete button. To request a copy of your data, or to delete your account and everything attached to it, email hello@viberation.dev. Deletion removes your profile, bookmarks, history and walkthrough progress. We will respond without undue delay, and within any period your local law requires.

9. Children

Viberation is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.

10. Links to other sites

The directory links out to third-party tools, and some of those links are affiliate links — see our affiliate disclosure. Once you leave Viberation you are on someone else’s site, under their privacy policy rather than ours.

11. Changes to this policy

If this policy changes we will update the date at the top of this page. If the change is significant we will make it more obvious than that.

12. Contact

Questions, requests, or complaints about privacy: hello@viberation.dev.