Your privacy is not just a policy for us; it’s a core part of how we designed our service. We believe in data minimization, which means we only collect the information that is absolutely necessary to provide our service to you.
This policy is effective as of September 2, 2025.
We collect very little information about you, and we are transparent about why we need it.
Email Address: When you create an account, we ask for your email address. This is the only piece of personal information we require. We use it exclusively to manage your account, send you magic links for passwordless login, manage subscription status, and for essential service-related communications.
Blocked Page Information: When a website is blocked, we send the URL of the blocked page and the intention you provided to our AI service to generate a contextual message (a "roast"). This information is used solely for generating the message and is not stored on our servers.
We are committed to protecting your information. We use commercially acceptable security measures to prevent loss, theft, and unauthorized access. Since you log in with a magic link, you don't have a password that can be stolen from our service.
While no electronic transmission or storage method is 100% secure, we do our best to protect your data. We comply with all applicable data breach laws.
We keep your personal data (your email address) only for as long as you have an account with us.
If you choose to delete your account, we will permanently delete your personal data from our production systems.
However, we may need to retain certain information for a limited period for compliance with legal, accounting, or reporting obligations (for example, retaining transaction records for tax purposes).
Under GDPR, you have rights over your personal data. You can:
If you wish to exercise any of these rights, please contact us. If you believe we have breached a data protection law, you have the right to lodge a complaint with a supervisory authority.
We use a few trusted third-party services to run our operations. We only share the minimum data necessary.
Our partners and third-party providers may maintain facilities in different countries. If we transfer your data internationally, we ensure it is protected under standards that comply with GDPR, such as using Standard Contractual Clauses.
For any questions or concerns regarding your privacy, you may contact us:
Hoang Linh Phung hello@codevagabond.com