Privacy Policy

Last updated: 2026-08-10

ApeXhit LLC ("ApeXhit", "we") built VibeDx to be as privacy-preserving as possible. This policy explains what we do — and don't — collect.

What we don't store

Scan targets (the URLs you submit) are not persisted to any database.
Pasted package.json contents are used only in-memory for that single request and discarded.
Session cookies you paste for authenticated scans are forwarded once to the target and never stored.
Scan reports live only in your browser session — export them yourself as JSON or an AI-fix prompt if you want a copy.

What is processed transiently

To run a scan, our serverless function makes outbound HTTP/TLS requests to the URL you provide and, if you supply a package.json, a batch lookup to the public OSV.dev vulnerability database (Google/OpenSSF). Package names and version ranges are sent to OSV.dev for that lookup only.

Hosting & infrastructure

VibeDx is hosted on Vercel. Standard platform-level access logs (IP address, request path, timing) may be retained by Vercel per its own privacy policy for operational and abuse-prevention purposes — we do not separately collect or analyze this data.

Cookies & tracking

VibeDx does not use analytics or advertising cookies. Your light/dark/system theme preference is stored locally in your browser only.

Contact

Privacy questions: apexhit01@gmail.com.