Time Machine Privacy Policy

Short version: your code never leaves your computer. We collect as little as we can, we never sell it, and secret values from config files like .env are never stored anywhere, even on your own machine. Only their key names and a fingerprint are kept.

1. What stays on your computer

The tm tool and the web app keep everything locally: save points, Git bundles, file copies, check logs, the audit log, and the names of settings you choose. We cannot see any of it. For settings, Time Machine stores only key names and a keyed fingerprint, never the values.

Two optional web app features talk to other services, and only after you turn them on. Ask sends a short summary of your history, with your own key, to Google's Gemini API, or to Anthropic's Claude API when only an Anthropic key is set. With a free Gemini key, Google may use what Ask sends to improve its products, and people at Google may read it (Gemini API terms). Anthropic's commercial terms cover what is sent with an Anthropic key. Vercel links read your deployments with your own token.

2. What we collect

No telemetry. The tm tool and the web app send no usage events.

Waitlist Draft

Draft, pending lawyer review. When you join the waitlist, we store your email address, that you agreed to join, the page you signed up from, the time, your own referral code, and the referral code that brought you, if any. Your signup is saved as pending and unconfirmed. The site does not send you any email. Pending signups do not count toward anyone's place in line. How confirmation and any future waitlist email will work is not decided yet, and we will update this page before it changes. We also count page visits, link shares and link copies. Each count stores only the kind of event, the page, whether the visit came through a referral link, and the time. Counts hold no email and no referral code. We do not store your IP address or user agent, and none of this uses cookies. Everything is stored in Supabase, written by a function hosted on Vercel. To have your entry deleted, email preston@unvibe.site.

To limit requests, we store a one-way code derived from your IP address, not the IP itself. Codes older than one hour are removed in batches during later requests.

Purchases Draft

Draft, pending lawyer review. Checkout is not open yet. A purchase of the web app key goes through Stripe. This site never sees your card details. Stripe tells us that a checkout session was paid, and we issue a license key that holds an opaque purchase id, the plan and the issue date. The key holds no name and no email. The key is shown on the page Stripe sends you back to. To see it again, you sign in at /account with a one-time code sent to the email you gave at checkout. That is the only email the site sends, and only when you ask for it. The sign-in token lives in your browser for that tab only. Stripe keeps its own record of the payment under its privacy policy.

3. What we never do

• Upload your code or project files.
• Store the values in config files like .env.
• Sell or share your personal information for advertising.
• Use your data to train AI models.

4. Who we share with

Only service providers that help us run Time Machine: Vercel, which hosts this site and its two functions, and Supabase, which holds the waitlist database. We will add any other provider here before we use it. We may share information if the law requires it.

5. How long we keep it

Purchase records: for as long as tax and accounting law requires. Waitlist emails: until you ask us to delete yours, and we delete the whole list 6 months after launch.

Anonymous website event counts older than 90 days are removed in batches when new counts arrive. If the site is inactive, older counts remain until it receives new visits.

6. Your rights

You can ask to see, correct, export or delete your data. Email preston@unvibe.site. We answer within 30 days. If you live in California, the EU, the UK or another place with privacy laws, you have the rights those laws give you, and we will not treat you differently for using them.

7. Children

Time Machine is not for children under 13. We do not knowingly collect data from them. If you think we have, contact us and we will delete it.

8. Security

We use encryption in transit, least privilege access, and keep the data we hold small on purpose. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.

9. Where data is processed

Our providers may process data in the United States and other countries, with legal safeguards for international transfers.

10. Changes

We will post changes here at least 30 days before they take effect.

11. Contact

[Operator], preston@unvibe.site