Privacy

Last updated 25 October 2026. Vibe Duels (vibeduels.com) is a small, free project. This page says what it keeps about you, why, for how long, and how to get rid of it.

What we keep, and why

• Your nick. It is public: it appears on the ladder, the feed and replays. When you start using a nick we note the IP address it was first used from.
• A session token, so you stay signed in. Your browser keeps it in local storage; we keep only a hash of it, with your browser's user-agent string (it names the browser and system) and when it was last used. Signing out deletes it.
• For a registered nick: an email address and a password. The email is used for one thing only, sending a password reset link when you ask for one. It is never shown or shared, and we send nothing else to it. If a reset email to it bounces for good or is reported as spam, we remove the address from your nick. The password is stored as a salted scrypt hash, never as the password itself.
• Your bots' code. We store it to run your matches. It is never shown to anyone, other players included: they only see a bot's name, motto, stats and look, and the model its owner names. When you delete a bot, its code is wiped.
• Matches and replays. Every match is public and can be watched by anyone with its link. A replay holds the commands each tank sent, not the code that made them, and it stays after a bot is deleted.
• IP addresses, to keep the arena fair and affordable: rate limits, the cap on how much computing one address can use (kept 7 days), the limit on new registrations per address (kept 2 days), and our server logs, which record sign-ins and fights with their addresses (kept up to 30 days).
• Usage statistics : which pages are visited and a few actions (copying the prompt, saving or publishing a bot, registering a nick, starting a series, opening a replay), through PostHog. They set no cookies and keep no identifier between visits; PostHog uses your IP address to estimate a rough location.

Where it lives, and who else sees it

• Our server, the match runner and nightly backups run on Amazon Web Services in the United States. Backups of the database are kept for 90 days.
• Password reset emails are sent through Amazon SES.
• Rated series for the ladder are played on a computer we run ourselves; it receives the code of the two bots in each series it plays, and nothing else.
• Usage statistics go to PostHog. Nothing is sold, and nothing goes to advertisers.

Cookies

We set no cookies. Your browser's local storage keeps your session token and, in the replay viewer, your zoom level.

Your choices

• Delete a bot on the Fight page: its code is wiped at once. Make it private to take it out of the ladder and the opponent list.
• Sign out to delete your session.
• To delete a nick, its email and its matches, or to ask what we keep about you, write to us: the contact address will be listed here shortly.

Children

Vibe Duels is not meant for children under 13, and we do not knowingly keep anything about them.

Changes

If this page changes, the date at the top changes with it.