Cookie and Fingerprinting Notice
Vibe x Vibe (VXV) Last updated: 15 March 2026 Version: 1.0
1. Overview
This Cookie and Fingerprinting Notice ("Notice") explains how Agentic Labs (ABN 46 212 791 945) ("VXV", "we", "us") uses cookies, device fingerprinting, and behavioural tracking technologies on the Vibe x Vibe Platform at vibexvibe.com.
This Notice forms part of our Privacy Policy, which provides further information about how we handle your personal information.
By using the Platform, you consent to the use of these technologies as described in this Notice.
2. What Are Cookies?
Cookies are small text files placed on your device by a website. They allow the website to remember information about your visit (e.g., your login session) and help the site function correctly and securely.
The Platform uses both first-party cookies (set by us) and third-party cookies (set by our service providers).
3. Cookies We Use
3.1 Strictly Necessary Cookies
These cookies are essential to the operation of the Platform and cannot be disabled. Without them, you cannot log in or use core features.
| Cookie | Purpose | Duration |
|---|---|---|
sb-[project-ref]-auth-token | Supabase authentication session — keeps you logged in | Session / 1 hour (refreshed) |
sb-[project-ref]-auth-token-code-verifier | PKCE code verifier for secure OAuth login flows | Session |
3.2 Security and Fraud Prevention Cookies / Storage
These are set for the purpose of protecting the integrity of the Platform and preventing fraud.
| Technology | Purpose | Duration |
|---|---|---|
| Cloudflare Turnstile (third-party) | Provides an invisible CAPTCHA challenge to distinguish human users from bots. Sets cookies on the cloudflare.com domain. | Session |
| FingerprintJS visitor ID (stored in session/local storage) | Generates a stable device identifier (visitorId) based on browser and device characteristics. This ID is submitted with each survey response to detect duplicate or multi-account submissions. | Persistent (browser storage) |
3.3 Analytics and Performance Cookies
We currently use Vercel Analytics and Vercel Speed Insights for basic, privacy-respecting analytics to understand platform performance. These tools do not use cookies and do not collect personally identifiable information.
4. Device Fingerprinting
4.1 What Is Device Fingerprinting?
Device fingerprinting is a technique that collects certain attributes of your browser and device — such as screen resolution, installed fonts, browser plugins, time zone, and hardware characteristics — to generate a unique identifier for your device. Unlike cookies, fingerprints persist even if you clear your cookies.
4.2 How We Use FingerprintJS
We use FingerprintJS (operated by Fingerprint, Inc., USA) to generate a visitorId for each device that accesses the survey-taking portion of the Platform.
Purpose: The visitorId is used exclusively for fraud and duplicate-submission prevention. Specifically, it allows us to:
- detect and prevent Testers from submitting multiple responses to the same Campaign from the same device;
- detect and prevent multi-account fraud.
The visitorId is not used for advertising, cross-site tracking, or any purpose other than platform integrity.
Each visitorId is submitted alongside your survey response and stored in our database alongside your tester_id. It is not shared with Creators.
FingerprintJS's privacy policy is available at: fingerprint.com/privacy-policy
5. Behavioural Analysis During Survey Sessions
5.1 What We Collect
When you participate in a Campaign (survey), our Vibe Guard fraud detection system collects the following behavioural signals from your browser session:
- Mouse movement patterns — general motion path and speed (not your full cursor history)
- Click timing and intervals — time between interactions
- Scroll behaviour — whether and how you scroll the survey page
- Time on page — total time spent on the survey before submitting
- Window focus events — whether you tab away from the survey (indicating potential automation or copy-pasting)
5.2 Why We Collect This
These signals are analysed by an AI model (Google Gemini API) to determine whether a session is consistent with human behaviour or more likely to be automated (bot-driven). This is to protect the quality of data received by Creators and ensure Rewards are only paid to genuine human participants.
5.3 What We Do Not Collect
We do not collect:
- your keystrokes or keyboard input (other than what you type into form fields);
- your full mouse trajectory recorded as a video or animation;
- any data from other websites or applications on your device;
- any content from outside the active survey window.
5.4 AI Analysis
Aggregated behavioural signals are sent to the Google Gemini API for human-vs-bot classification. The result (a classification label, not your raw data) is used to determine whether your survey response passes our quality threshold. We do not make solely automated decisions that affect your legal rights — a human review process is available if you dispute a fraud determination (see our Terms of Service, Section 7.3).
6. Managing Cookies and Tracking
6.1 Browser Cookie Controls
Most browsers allow you to manage or delete cookies via their settings. For guidance:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and Site Permissions
Please note: disabling strictly necessary cookies (Section 3.1) will prevent you from logging in to the Platform.
6.2 Fingerprinting and Behavioural Tracking
Fingerprinting and behavioural analysis are integral to the integrity of the Platform's survey service and cannot be selectively disabled without also disabling your ability to participate in Campaigns. If you do not wish to be subject to these technologies, you should not use the survey-taking features of the Platform.
You can opt out of FingerprintJS browser fingerprinting across the web by following the instructions at: fingerprint.com/opt-out
6.3 Cloudflare
Cloudflare acts as our network security provider and processes all web traffic. For information about Cloudflare's data practices: cloudflare.com/privacypolicy
7. Changes to This Notice
We may update this Notice to reflect changes to our technology or legal obligations. Material changes will be notified via the Platform or email. The date of the last update is shown at the top of this page.
8. Contact
For questions about this Notice or our use of tracking technologies:
Privacy Officer Agentic Labs Email: privacy@vibexvibe.com ABN: 46 212 791 945