Can I vibe code Iubenda?

Build a privacy policy generator and consent management platform (CMP) using Next.js 14, Tailwind CSS, PostgreSQL, and Prisma.

CORE DATA MODELS:
1. Organization (id, name, createdAt)
2. Domain (id, orgId, hostname, status, analyticsConsentCount, marketingConsentCount)
3. Clause (id, code, categoryEnum, textEn, textEs, textDe, isMandatory, dynamicFieldsJson)
4. Policy (id, domainId, policyTypeEnum, generatedHtml, clausesConfigJson, updatedAt)
5. ConsentLog (id, domainId, userHash, ipCountry, consentStateJson, consentProofSignature, timestamp)

KEY FEATURES:
1. Consent Banner Embed Widget:
   - Provide a standalone, zero-dependency, ultra-lightweight vanilla JS script tag (under 10KB) hosted on CDN.
   - Script blocks scripts matching data-cookiecategory="analytics|marketing" until user consent is captured.
   - Supports Google Consent Mode v2 default states (ad_storage, analytics_storage, ad_user_data, ad_personalization) set to 'denied' prior to interaction, updated to 'granted' post-consent.
   - Render customizable banner UI (bottom strip, modal popup) with Granular Preferences toggles.

2. Consent Database API:
   - Endpoint POST /api/v1/consent to log explicit consent actions.
   - Compute SHA-256 HMAC signature of timestamp + user IP + user agent + consent state as cryptographic proof of consent.
   - Store record in ConsentLog table to satisfy GDPR Article 7 audit requirements.

3. Policy Generator Builder:
   - Admin UI allowing users to select active integrations (e.g., Shopify, Google Analytics 4, Meta Pixel, Stripe, Klaviyo).
   - Map selected services to legal Clause records.
   - Inject dynamic variables (Company Name, Address, Contact Email, DPO details) into policy templates.
   - Serve dynamic policy via embeddable JS snippet or GET /api/v1/policy/[domainId]/html endpoint.

4. Platform Integrations:
   - Provide a Shopify App Bridge ready script loader injection logic.
   - Provide WooCommerce PHP snippet generator for injecting cookie blocking headers.

FAILURE MODES & OUT OF SCOPE:
- OUT OF SCOPE: Automated site crawler for dark-cookie discovery (use manual selection).
- OUT OF SCOPE: IAB TCF v2.2 framework certification.
- OUT OF SCOPE: Legal liability guarantees or legal advice services.
- CRITICAL: Ensure JS script tag fails open gracefully if API endpoint times out to prevent blocking store page rendering.

$ each button prefixes agent-specific run instructions · build your own product, never copy proprietary code, trademarks or designs