Privacy Policy

Was It Vibed? is operated by Brambleworks LLC, referred to here as "we" and "us".

What We Collect

When you scan a URL, we fetch that URL's HTML and CSS to analyze it. We do not create accounts or profiles, and we do not collect personal information about you beyond what is listed below.

Scan Results Are Public

A scan of a clean, query-free URL is stored and published: it gets a permanent link anyone can visit. Anyone can scan any public site, so a result may be about a site you do not own. A site appears on the leaderboard, and is listed in our sitemap for search engines, as soon as it has been scanned and scored by the current version of our detector; the two lists apply the same rule. If a site is yours, or is about you, and you want it removed, email support@sitecmd.com with the link. We delete it and add the site to a denylist so a later scan cannot list it again.

URLs that carry a query string, a fragment, or a credential-shaped path are never stored, published, or listed. Those scans still run and still show you a result; they just leave nothing behind.

Data We Process

• URLs you submit: used to fetch and analyze the target page, and, subject to the rules above, stored and published as a scan result.
• IP address: used for rate limiting (50 requests per hour) and, as a keyed hash stored with each scan, to record how many different people have scanned a site. The key is a server secret, the hash cannot be turned back into an address, and the address itself is not stored.
• Email address (optional): only if you ask us to email you a report. We send the report link through Resend (our email delivery processor) and keep only a hashed form of the address to limit how many reports one inbox can be sent. If you tick the box, we also pass the address to the SiteCMD update list, which sends a confirmation link and adds you only when you click it; every list email has an unsubscribe link. Email support@sitecmd.com to stop anyone sending reports to your address.

Bot Check

Submitting a scan runs Cloudflare Turnstile, a bot check that runs in your browser and issues a token we verify on the server before the scan starts. Turnstile evaluates browser and connection signals to tell people from scripts. We never see those signals, only whether the check passed, and we do not use them to identify or profile you. Turnstile is covered by Cloudflare's Privacy Policy.

What We Don't Do

• We use Plausible Analytics for aggregate, cookie-free traffic metrics.
• We don't use advertising pixels, cross-site tracking, or user profiles. The only script that inspects your browser is the bot check described above.
• We don't sell submitted URLs or scan results.
• We don't create user accounts or profiles.

Infrastructure

This service runs on Cloudflare Workers. Cloudflare may process standard connection metadata (IP address, TLS version, etc.) as part of their infrastructure. See Cloudflare's Privacy Policy for details.

Contact

For questions about this policy, contact us at support@sitecmd.com.