LegalCAN I VIBECODE
Iubenda?
BUILD FIRST
- A non-sensitive or read-only version of the core experience
- A manual review step wherever correctness or trust matters
- A narrow companion tool that removes a real piece of work
LEAVE FOR LATER
- Regulated decisions, payments, or irreversible actions
- Claims of correctness, compliance, or uptime that the MVP cannot support
- Sensitive integrations until security, support, and auditability are ready
RESEARCH NOTES
What this tool actually does.
Iubenda is a SaaS platform helping websites, apps, and organizations comply with GDPR, ePrivacy, CCPA/CPRA, LGPD, and similar privacy laws. Core products include a customizable cookie/consent banner, a privacy & cookie policy generator, and a terms & conditions generator. The policy generator uses a wizard that assembles 2,400+ lawyer-drafted clauses into policies in up to 27 languages, with automatic legal updates when regulations or integrated services change. The consent banner blocks scripts until permission is granted, stores consent logs for up to 12 months, and integrates with Google Consent Mode (Iubenda is a Google CMP Partner). Policies embed via footer link, modal, inline text, or direct URL. The platform also offers website accessibility monitoring and organizational privacy-management features.
RESEARCHED BUILD PROMPT
Give this to your coding agent.
Build a focused replacement for Iubenda's core workflow: a privacy-compliance assistant that generates privacy & cookie policies and manages consent banners for a small site.
Workflow: (1) a wizard steps the site owner through data-collection questions: contact forms, analytics cookies, third-party scripts, payment processors, user accounts. (2) The server assembles a privacy policy and cookie policy from a clause library keyed to data-purpose, generating ordered sections: data controller, data collected, legal bases, retention, user rights, transfers. (3) The owner customizes clauses and exports as HTML for embedding or Markdown for docs. (4) The system emits a single /banner.js embeddable script that renders a customizable consent banner, blocks tracked scripts until consent, stores consent in localStorage, and POSTs consent events to /consent. (5) A simple dashboard lists consent logs: visitor_id, choice, timestamp, filters.
User-facing requirements: step-by-step wizard in plain language; live preview of policies as answers change; banner with Accept All / Reject All / Manage Preferences plus brand-color customization; read-only dashboard.
Technical requirements: Node.js + Express with SQLite storage (or Python + Flask); server-side policy assembly from a clause database; vanilla JS or React for the wizard and banner; /banner.js served based on site config; intent-driven script blocking via data-cookie-category attributes observed by MutationObserver.
Explicitly do not copy Iubenda's brand, logo, visual design, marketing copy, or policy wording — write original text. Out of scope: legal review or guarantees (frames as a template aid, not legal advice), multi-language support, automatic legal updates, terms & conditions generation, accessibility monitoring, auth beyond a simple admin token.
Deliver a README with setup steps, architecture overview, and important limitations: generated policies are templates, consent logs are plaintext in SQLite, dashboard has minimal/no authentication.