Skip to content
Vibe Console

Privacy Policy

Last updated: October 13, 2026

NesDesign LLC, a US company, operates this website, Vibe Console, Vibe Remote and their account and relay services. This policy explains what we collect to run them. The apps do not use advertising trackers or app-usage analytics; the website uses the analytics described below. Our account and relay services are hosted in the European Union, in Finland, by Hetzner Online GmbH. Our service providers RevenueCat, Resend, Stripe and Google process data in the United States. Payment data handled by Stripe and Link may also be processed in other countries under Link's privacy policy.

Website

This website can use two analytics services to understand how visitors use it, but only after you allow them in the banner shown on your first visit. Until you choose, and if you decline, neither service is loaded and no analytics cookie is set:

We use this data to measure and improve the website, including how often the download is started. You can change your choice at any time with “Analytics settings” at the bottom of the page; withdrawing consent removes the Google Analytics cookies from this site. Your choice is stored in your browser. Blocking these tools does not affect the apps.

Accounts and purchases

To check access, we create a random customer identifier and separate device credentials. Our account service stores the devices and confirmed pairings associated with that identifier and checks subscription status through RevenueCat. A subscription may be used on one Mac and one iPhone. An iPhone can subscribe or restore without giving us an email address.

Apple handles iPhone in-app payments. A Mac purchase needs no account: our website or the Mac app opens a Stripe Checkout page through RevenueCat with our random customer identifier, so the purchase can be matched to it. You enter your email only on that checkout page, and later in the app if you restore the purchase on another device. Mac payments are processed by Stripe Managed Payments; for these purchases Stripe is the merchant of record and appears to you as Link (“Sold through Link”). Stripe collects the details you enter at checkout, such as your name, email address, billing address and payment method, and uses them for payment processing (including sales tax calculation) and fraud prevention under its own privacy policy. Link sends receipts and subscription emails. If you ask Link to delete your data, Stripe also cancels any subscriptions sold to you through Link. RevenueCat processes purchase and subscription status from Apple and Stripe so we can decide whether access is active. We receive status and order information needed to provide access and support, but not your card details. Apple, Stripe (including Link) and RevenueCat handle their data under their own privacy policies. Earlier one-time license keys may be checked with Polar solely to preserve those buyers' Mac access.

Email

You need to give us an email only to restore a Mac or website purchase on another Mac or on an iPhone with Restore purchase: you enter the email you paid with, we send it a one-time code, and once it is confirmed our account service looks up the purchase at Stripe by that email and links it to your device. We store the confirmed address encrypted and use it only for restoring and recovery. Resend receives the address and the one-time code to deliver a verification message. Codes expire after 10 minutes. Verification emails contain no tracking pixels or remote images, and we do not use these addresses for marketing. Resend currently retains sent email and log data for 30 days under its published policy. If you email support, we use your address and message to answer you.

Your projects and Remote connections

Your project files and settings are stored on your Mac; a paired iPhone receives the Remote content you choose to view. Agent CLIs, skills and commands you run are third-party software and may contact their own providers. The app also contacts providers you choose for usage readings or custom endpoints, skill sources when you request them, and a link's source when you ask it to download an image. These connections are governed by those services' policies.

When you show a user-added skill card, the Mac app may request its repository owner's public avatar from GitHub (github.com or avatars.githubusercontent.com) and cache it locally; your saved repository list stays on your Mac and is not sent to us.

A paired iPhone connects to its Mac directly over the same local network while Vibe Console on that Mac has an active trial, subscription or earlier permanent license. That connection does not pass through our servers; a subscribed Mac separately checks its subscription with our account service from time to time. If you use Connect from anywhere, your devices meet through a relay we operate. Terminal content is encrypted between your devices with keys the relay does not hold, so we cannot read it. The relay carries the encrypted traffic in memory and stores no terminal content or connection history.

While a relayed connection is active, the service processes both devices' IP addresses, connection time, padded traffic sizes and timing, and a pairing identifier. It also uses a subscription identifier to enforce access and limits. Our account service knows which customer and paired devices these identifiers belong to, so this connection metadata can be linked to your customer record. It keeps daily usage counters, not a history of sessions. Raw IP addresses are used during requests and are not stored in account records; for abuse protection the relay may keep an address in memory for at most one hour. Our account service keeps IP addresses only as a keyed value that changes every day; its safety counters expire within one hour or by the end of the UTC day.

Legal bases

Where the GDPR or a similar law applies, we process account, device, pairing, subscription and relay data to provide the service you ask for (performance of a contract), IP-based counters and abuse checks for our legitimate interest in keeping the service secure, and website analytics only with your consent. Payment providers keep billing records to meet their legal obligations.

Retention and deletion

You can delete your customer account in either app. This removes its identity, device credentials and confirmed pairings and requests deletion of its RevenueCat customer data, subject to legally required retention. Account deletion does not cancel a subscription billed by Apple or Link, remove local projects, or cancel an earlier permanent Mac license. Manage or cancel billing with the merchant separately before deleting the account. You can turn off Connect from anywhere in the Mac app at any time; local-network use remains available.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to withdraw consent at any time without affecting earlier processing. To make a request or ask about this policy, contact support@vibeconsole.dev. If you are in the European Economic Area or the United Kingdom, you can also lodge a complaint with your local data protection authority. We do not sell or share personal data for marketing.