Privacy

Last updated October 25, 2026. vibestreak is run by Kingsbridge Consultancy LLC ("we"). Questions: support@kingsbridge-consultancy.com.

The short version

We collect daily totals of your AI coding activity and the days you shipped commits with an AI co-author, so we can show your heatmap, streak and rank. We never collect your prompts, the AI's responses, your code, file names, repository names, commit messages or email addresses. Your profile is public unless you hide it; you can delete everything at any time.

What we collect

• From GitHub, when you sign in: your public profile: account id, username, display name and avatar. We ask for no permissions beyond that and do not keep GitHub's access token.
• From the CLI, when you sync: per day and tool, counts of messages, tool calls, sessions and tokens, and the names of the AI models used; per commit you authored, a one-way keyed hash of its id (which cannot be turned back into the commit), its day, and the AI agent named in it; per machine, a random id, the machine's name and its timezone. npx vibestreak collect --json prints exactly what a sync would send.
• When you use the site: a session cookie to keep you signed in (no tracking or advertising cookies), and the standard request information Cloudflare processes to serve and protect the site.
• To see how the service is doing: daily totals that say nothing about who, such as how many streak cards and profiles were loaded and from which site or app (GitHub, LinkedIn, X), how sign-ins and syncs went, which MCP tools were called and by which assistant app, and which search and AI crawlers visited. Share links from your profile carry ?ref= (readme, linkedin, x, site): when someone signs up from the page such a link opened, we count the sign-up under the link's name (no cookie is set for it). For your own profile we also keep the days your machines synced, how many days and commits your last upload held, and evenings when your streak was at risk and whether it was kept, to check that syncing and the evening reminder work. All of it is deleted with your profile.

What is public

Your username, avatar, linked GitHub accounts, the tools you use, your heatmap, streaks, totals, rank and streak card are public, and appear on boards, profile pages, streak card images and the public API. Machine names and timezones are shown only to you. Hide your profile in Settings to remove it from boards and public pages.

How we use it

Only to run vibestreak: computing your heatmap, streaks and ranks; checking your shipped days against the public contribution calendars of your linked GitHub accounts (for the verified badge); spotting implausible data; and keeping the service secure. We do not sell your data, use it for advertising, or train AI models on it.

Who processes it

Cloudflare hosts the site and its database. GitHub provides sign-in and the public contribution calendars. No one else receives your data.

Keeping and deleting it

We keep your data while your profile exists. Settings → Delete profile and all data deletes your profile, days, commits, machines, tokens and sessions at once. Removing a machine deletes the days it sent. Data in backups and caches expires within 30 days.

Your rights

You can see, correct (by syncing again), download (the public API returns everything about your profile) and delete your data. If you are in the EU, the UK or California you have these rights by law, and may also object to processing or complain to your data protection authority. Write to us for anything the site doesn't let you do yourself.

Children

vibestreak is not meant for anyone under 16.

Changes

We will post changes here and update the date above; for significant changes we will tell signed-in people on the site.