Privacy policy

Revised on 2026-09-04.

Definitions

• The author: Aron Soto, who builds and maintains Verbaly and this site.
• Verbaly: the open source packages published on npm under that name.
• The site: the pages where this policy is shown, together with the documentation.
• Your browser: the program you are reading this page with. Everything this policy calls storing happens inside it, on your device.

Privacy of the package

Verbaly runs on your machine and in your build. It has no telemetry, sends no usage statistics and makes no network request, neither while compiling nor in the browser of anyone using your app. It has no runtime dependencies either, so there is no third party code that could make one on its own.

Your text and your translation catalogs never leave your project. The compiler reads them and writes them on your disk, and that is where it ends. If you ever see Verbaly making a network request, that is a bug and it should be reported.

Privacy of the site

The site collects no personal data. Specifically, and you can check this in the source: there are no cookies, first party or third party; no analytics and no audience measurement; no tracking pixels and no advertising identifiers; no accounts and no sign up; and no form anywhere to type anything into.

That is also why you will not see a cookie banner. We do not carry one because there would be nothing to consent to.

Fonts, icons and images are served from this same domain. There is not a single request to Google Fonts or to an outside content network, so opening the site does not report your visit to anyone else.

What your browser stores

The site remembers four preferences so your next visit opens the way you left it. They are kept in localStorage, which is a store inside your own browser: they never travel to any server, ours or anyone else’s, and nobody but you can read them.

• v-theme: whether you prefer the light theme or the dark one.
• v-locale: the language you picked, so the site can take you back to it.
• v-pm: your package manager, so commands show up for npm, pnpm, yarn or bun.
• v-stars: the star count of the repository and when it was fetched, so GitHub is not asked again on every page.

You can delete them whenever you like from the site data of your browser. The site keeps working the same: without them it simply falls back to its defaults.

Outside providers

The site makes two requests to services that are not ours, and both ask for public figures anyone can look up. Like any request on the internet, the service on the other end sees the address it arrives from and the kind of browser. We receive none of that.

• GitHub: the star count of the repository is fetched when any page opens.
• npm: the public download figures for the package are fetched when the npm panel opens.

The site is hosted on Vercel. Like any web server, Vercel logs the requests it receives in order to serve them and to protect itself from abuse, which includes the IP address and the time. Those logs are theirs, not ours, and we neither read them nor cross them with anything. Every page is a static file: there is no database and no session.

Children

This site is technical documentation and is not aimed at children. Since no personal data is collected from anyone, none is collected from a child either.

Changes to this policy

If this policy changes, the revision date above changes with it. Important changes, such as adding a new service, are written up in the changelog as well.

Contact

For anything about privacy, open an issue on GitHub. It is public, it stays on the record, and the answer serves whoever has the same question.