Privacy Policy

1. Who we are

VST.Tools is operated by VybeCode Software (“VybeCode,” “we,” “us”). This policy explains what information we collect when you use this site, why we collect it, and the choices you have. If anything here is unclear, email us at info@vybeco.de.

2. Information we collect

We collect only what the service actually needs to run:

• Account information — the email address and optional display name you register with, and a password. Your password is never stored in plain text; we store a salted, one-way hash of it.
• Download and entitlement history — which plugins you’ve claimed or purchased, so they can appear on your account page. Each download event also records the IP address and timestamp, kept for security and abuse-prevention purposes.
• Cookies — a session cookie (httpOnly, not readable by page scripts) that keeps you signed in, and a CSRF token cookie that protects account actions from cross-site request forgery. Both are strictly functional. We do not set advertising or analytics cookies today; if that changes, this policy will be updated first.

3. How we use your information

We use the information above to:

• create and secure your account, and keep you signed in between visits;
• verify your email address and let you reset a forgotten password;
• show you the plugins you’re entitled to and let you download them;
• investigate abuse, fraud, or security incidents; and
• respond when you contact us for support.

4. How we share your information

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We do share it with a small number of service providers who help us run the site — for example, a hosting provider, a transactional email provider (for verification and password-reset emails), and a cloud storage provider (for the plugin installer files themselves). Each only receives what it needs to do its job. We may also disclose information if required by law, or to protect the rights, safety, or property of VybeCode, our users, or others.

5. Data retention

We keep your account information for as long as your account is active. If you ask us to delete your account, we’ll remove or anonymize your personal information within a reasonable period, except where we’re required to retain certain records (for example, security or audit logs) for a longer period.

6. Your rights and choices

You can review the name and email on your account from your account page at any time. To request a copy of your data, a correction, or deletion of your account, email info@vybeco.de from the address on the account and we’ll handle it directly.

7. Children’s privacy

VST.Tools is not directed at children, and we don’t knowingly collect information from anyone under 13. If you believe a child has created an account, contact us and we’ll remove it.

8. Security

Passwords are hashed with argon2id. Sessions are opaque, server-side, and revocable — signing out or resetting your password invalidates them immediately rather than waiting for an expiry. The site is served over HTTPS. No method of storage or transmission is perfectly secure, but we design for these properties deliberately rather than as an afterthought.

9. Changes to this policy

If we make a material change to this policy, we’ll update the date at the top of this page. Continued use of VST.Tools after a change means you accept the updated policy.

10. Contact us

Questions about this policy or your data can go to info@vybeco.de.