Privacy
How Vlak handles website and MCP request data. Last updated 9 September 2026.
Who operates Vlak
Noord.dev publishes Vlak and operates vlak.dev and its public MCP endpoint. Questions or privacy requests can be sent to hello@noord.vc.
What Vlak processes
Vlak has no user accounts and does not ask for names, email addresses, payment details, or authentication credentials. The public MCP server processes the tool name and arguments sent in a request so it can return component documentation, props, tokens, or installation instructions. Request bodies are processed in memory and are not written to a Vlak database.
Vlak runs on Vercel. Like most hosting providers, Vercel receives technical request information such as IP address, request time, host and path, response status, browser or client details, and approximate location derived from IP. Vlak uses this information only to deliver the service, diagnose failures, measure reliability, and prevent abuse.
Website analytics
The website uses Vercel Web Analytics. It records aggregate page views and a small set of fixed events such as an installation-command copy or documentation link click. Vlak removes query strings and fragments, rejects unknown paths and event fields, and never sends copied text, form values, or clipboard contents. Vercel Web Analytics does not use third-party cookies; its visitor hash resets after 24 hours and is not used to follow a person across sites.
Appearance settings are stored only in the browser's local storage. One session flag prevents duplicate acquisition events. These values are not account identifiers and are not sent to Vlak.
Sharing and retention
Vlak does not sell personal data. Technical request and analytics data is processed by Vercel as the hosting and analytics provider. Vlak does not use an advertising network or share MCP request content with other services. Runtime logs are available to Vlak for no more than 30 days, depending on the hosting plan, and are then removed from the accessible log store. The daily analytics visitor hash expires after 24 hours. Aggregate analytics may remain available for the reporting period configured by Vercel.
Your choices
You can use the open-source packages and local stdio MCP server without calling vlak.dev. You can block the website analytics script, clear local storage in your browser, or stop using the hosted endpoint. To ask what data may relate to a request, or to request deletion where applicable, email hello@noord.vc. Include the approximate request time and endpoint, but do not send secrets or full prompt content.
Changes
This page will be updated before Vlak materially changes the data it collects or how it uses that data. Vercel's own processing is described in its privacy notice.