Effective 23 September 2026

Privacy

App2Vibe is a community site for indie builders: list an app, try other people’s apps, and leave honest notes. Partner payments are not offered on this version. This page says what the site stores. It is not a certification and it does not promise perfect security.

What this version does

The live site is for listing, trying, and reviewing apps. There is no checkout, no commission payout, and no platform fee to pay. Code for partner offers stays in the product and may return later. Until then, nothing on App2Vibe takes a payment from you.

Information collected

If you create an account, App2Vibe may store your email address, display name, username, and the authentication identity from Supabase. If you choose Google sign-in, Google provides that identity. Google is not used unless you choose it.

Founders can store products, prices, commission offers, and tracking setup such as an Apple team ID and bundle ID. Promoters receive a partnership record and a unique tracking link at /go/[code]. App2Vibe records referral clicks: the time, the referring site’s hostname, and a broad device category. Opening an app from a listing also increments a public click count for that product. It does not keep the raw IP address or the raw user agent on a click.

Estimated commissions are stored when a founder’s Stripe or RevenueCat account sends a verified event that includes the tracking code. App2Vibe also stores a platform fee on that sale and, when the founder pays it, a Stripe charge on App2Vibe’s own account. App2Vibe does not hold the customer’s purchase.

How information is used

Account data runs the marketplace: signing in, listing a product, joining a program, and showing a tracking link. Click and conversion records show estimated results to the founder and the promoter. They are estimates. They are not an official payout statement.

Cookies and attribution

A banner lets you accept all cookies or keep necessary ones only. You can change that later with Cookie settings in the footer.

Signing in uses Supabase authentication cookies. Those are necessary for the account.

A referral link adds the code to the destination address as app2vibe_ref. On Android store links it is placed in the Play install referrer. On iOS, the App Store link does not keep the code, so the visitor is shown the code to enter in the app. The founder’s own website may store the code in a first-party cookie and send it to Stripe as app2vibe_tracking_code or client_reference_id. A mobile app may store it as the RevenueCat subscriber attribute app2vibe_ref. There is no App2Vibe mobile SDK. App2Vibe does not set a cookie on the founder’s domain.

The optional live map uses a random cookie named a2v_sid, and only after you allow it. Presence records contain a country, a page path, and timestamps. Public pages do not show the page path, your name, or your account. Public visitor IP addresses are not stored in the presence tables and are not sent to a third-party geolocation service. Country may come from a hosting or CDN country header, such as Vercel or Cloudflare.

Service providers

Supabase provides authentication and the database. Vercel hosts the web application. Resend delivers authentication email. Cloudflare manages the domain and DNS. Stripe or RevenueCat, when a founder connects them, are the founder’s payment and revenue source. App2Vibe receives webhook events those services send.

Data sharing

A founder can see partnership and estimated commission records for their products. A promoter can see their own. Public pages can show a product, a public profile, country-level visitor counts, how many people joined today, this week, and this month, and a public count of times someone opened an app from App2Vibe. A builder can hide their name on a listing. App2Vibe does not sell personal information.

Retention

Account, product, partnership, click, and conversion records stay while the account or listing exists, unless you ask for deletion. Presence rows are operational records for the live map and visit counts.

Security limitations

Access is limited with database rules and server-only keys. That reduces risk. It does not guarantee that data cannot be lost, delayed, or exposed.

User choices and deletion requests

You can decline the live map. You can skip Google sign-in and use email. You can ask the site owner to delete your account and associated data through the contact details on the Impressum page. Deletion does not cancel a purchase you already made through Stripe, Apple, or Google.

Children

App2Vibe is not directed at children under 16, and accounts are not meant for them.

International processing

The host and database may process information outside your country, including in the regions chosen for Vercel and Supabase.

Changes

If this page changes, the effective date at the top will change. The current page is the one published on the site.

Contact: hello@app2vibe.com.