Vibe Check — Privacy Policy

Effective 27 August 2026

What Vibe Check does

Vibe Check is a Chrome extension that checks the website you are viewing for files and keys that were never meant to be public — internal documents such as CLAUDE.md or .env, API keys inside the site's JavaScript, exposed source maps and directory listings. It reports what it finds to you, in the extension's own window.

Data we collect

None. Vibe Check does not collect, store or transmit personal information, browsing history, page content or check results to us or to any third party. There is no server operated by us that the extension communicates with.

Requests the extension makes

When you click Check this site, the extension sends a series of small HTTP requests from your browser directly to that website — one for each path on its list — and reads the JavaScript files that the page has already loaded. These requests carry no identifying information beyond what your browser sends to any website. The website being checked will see them in its logs the same way it sees any visit.

If you turn on Passive mode in settings, the same check runs automatically, once per day, for each new website you visit. Passive mode is off by default and can be turned off at any time; turning it off also releases the broad site permission it requires.

Data stored on your device

• Settings — whether passive mode and notifications are on, and your ignore list. Stored in the extension's local storage in your browser.
• History — for each site checked, the site's address, the time, and counts of what was found. No file contents and no key values.
• Current results — the detail of the most recent checks is kept in session storage and is discarded when you close the browser.

API keys that the extension detects are shown to you masked (first and last few characters) and the full value is never stored.

Downloads

When you click Download on a finding, the extension fetches that file from the website and saves it to your Downloads folder. Nothing is downloaded without that click, and downloaded files stay on your device.

Permissions

• activeTab — to know which site you clicked the icon on.
• scripting — to list the current page's script files so the key scan reads only what the page already loaded.
• storage — for settings and history, as described above.
• downloads — to save files when you click Download.
• notifications — to tell you when passive mode finds something, if you have enabled it.
• Site access — requested per site when you click Check; requested for all sites only if you turn on passive mode.

Third parties

Vibe Check contains no third-party code, no advertising, no analytics and no tracking. It does not load or execute code from the internet.

Changes

If this policy changes, the new version will be published at this address with a new effective date.

Contact

Questions about this policy: chris@outergy.com.