Privacy Policy

Effective 2026-09-05. This page changes only when the site's practices do, and the date moves with it.

Who is responsible for this site

Vibe Code Textbook is an independent site run by one person. That person is the data controller for anything this site collects, and the address for every question, request, or complaint below is contact@vibecodetextbook.com. If a data-protection authority or a formal rights request needs the operator's full legal name and postal address, write to that address and it will be given.

The short version

This site is static articles, plus code listings and data files you can download. There are no accounts, no comments, no chat, no uploads, and no form that submits anywhere. Reading a page sends nothing to me beyond the ordinary server log line described next.

What is collected

Server logs. Like almost every website, the server that delivers these pages records basic request data — IP address, the page requested, the time, and the browser's user-agent string — for security and debugging. Those logs are kept briefly and are not used to build a profile of anyone.

Analytics. This site may use Google Analytics 4 to understand aggregate traffic: which pages are visited, roughly which country a visit came from, whether a visitor arrived from search. It loads, if at all, under the consent defaults described below, which deny analytics storage on every page, so it runs cookieless: no analytics cookie is set and no identifier is stored on your device unless and until you consent through a prompt. Google Analytics 4 does not log or store IP addresses; it uses the address in transit to derive a coarse location and then discards it. There is no user-level reporting on this site, and no personal information is sold.

Advertising

This site may display advertising served by Google AdSense. Whenever advertising is running, the following applies.

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or to other websites.
• Google's use of advertising cookies — including the DoubleClick cookie — enables Google and its partners to serve ads to users based on their visits to this site and other sites on the internet.
• You can opt out of personalised advertising by Google at Google's Ads Settings. Google's own account of how it uses data in advertising is at policies.google.com/technologies/ads.
• You can opt out of personalised advertising by many other vendors at aboutads.info/choices, and, in Europe, at youronlinechoices.eu.
• Third-party vendors and ad networks other than Google may also serve ads on this site; where they do, the opt-out routes above apply to those that take part in those programmes.

Ads are never placed inside a code listing or between an article's heading and its first paragraph. The articles read identically whether or not you accept advertising cookies.

Consent

Every page on this site sets consent defaults to denied — for advertising storage, advertising personalisation, advertising user data, and analytics storage — before any measurement or advertising code can load. As this is written, nothing on the site changes those defaults, and no advertising code loads on any page at all. When that changes, visitors in the European Economic Area, the United Kingdom, and Switzerland will be asked first by a consent management platform certified by Google, and declining will leave every page fully readable. Anywhere else you can refuse everything by blocking cookies or using any content blocker; nothing here breaks when you do.

Cookies and local storage

The site itself sets no cookies. Any preference it stores locally — a display choice — stays in your browser's local storage, is readable only by this site, and disappears when you clear site data. If analytics runs, it runs in its consent-denied, cookieless mode and sets no cookies of its own; if you ever consent through a prompt, analytics and advertising set their own cookies as described in the sections above and in the linked Google policies.

This site's audience, and children

Vibe Code Textbook is written for adults: working professionals, students in higher education, and practitioners. Its subject matter, its presentation, and the audience it attracts are all adult, and it is a general audience site, not one directed at children. It does no age screening, because age screening would mean collecting personal information the site otherwise does not want.

I do not knowingly collect personal information from children under 13, or under the equivalent age where you live. The only channel by which a reader can send me anything is the email address on the contact page, which exists for corrections and is intended for adults. If you believe a child has emailed personal information to this site, write to contact@vibecodetextbook.com and it will be deleted.

Your rights in the EEA and the UK

Where the GDPR or UK GDPR applies, the lawful bases are these: server logs are processed under legitimate interest in keeping the site available and secure; analytics and advertising cookies are processed only on your consent, given through the prompt described above and withdrawable at any time by clearing site data or changing your choice.

You have the right to ask what is held about you, to have it corrected or erased, to object to processing based on legitimate interest, to restrict processing, to receive a copy of data you provided, and to withdraw consent without affecting anything done before you withdrew it. For almost every visitor the honest answer to the first of those is "nothing beyond a short-lived server log line". Send any such request to contact@vibecodetextbook.com. You also have the right to complain to your national supervisory authority.

California residents

This site does not sell your personal information. Advertising cookies, when running, can amount to "sharing" for cross-context behavioural advertising as the CPRA defines it. California residents may request access to, correction of, or deletion of personal information, and may opt out of any such sharing, by writing to contact@vibecodetextbook.com. Exercising any of these rights changes nothing about how the site treats you.

Third parties, and where the site is hosted

The site is plain static files — HTML, CSS, JavaScript, PNG card images, and the downloadable code and data files — served from a Windows server running Microsoft IIS, on hardware rented from a hosting provider and administered directly by the person who runs this site. The request logs are the ones IIS writes, they stay on that server, and they are kept as described below; the provider's own infrastructure logging is subject to that provider's policies. Pages load typefaces from Google Fonts, which means your browser requests font files from Google's servers. Google Analytics 4 and Google AdSense are the only other third parties that can run here, under the consent described above. There is no other tracker, tag manager, social widget, comment system, or embedded third-party content anywhere on this site. Links to outside sources open the source's own site, under that site's policies.

How long anything is kept

Server logs are short-lived. Analytics data, if any, is aggregate and retained under Google Analytics' own retention setting. Email you send is kept only as long as it takes to act on it, and is deleted on request.

Changes

This policy changes only when the site's practices change, and the effective date at the top moves with it. A material change — the day advertising actually starts, for instance — is reflected here before it takes effect, not after.