Privacy
VibeSpell generates files on your device. The options you pick and the text in the preview are not sent to a server. Recipe pages are static HTML.
The newsletter form posts the address you type to this site's signup endpoint. If NEWSLETTER_WEBHOOK_URL is unset, the address is validated and thrown away. Nothing is written to a database. When that variable points at a provider, the address and a source label are forwarded to that provider and nowhere else.
Analytics scripts load only when both NEXT_PUBLIC_ANALYTICS_PROVIDER and NEXT_PUBLIC_ANALYTICS_DOMAIN are set. The built-in provider is Plausible, which does not use cookies. With the variables empty, no analytics request is made.
Sponsor and recommended-tool links, when configured, are ordinary outbound links marked rel="sponsored". The lists ship empty.
Questions go to the feedback link in the footer. That address is a placeholder until the site owner sets NEXT_PUBLIC_FEEDBACK_URL.