Privacy Policy
This document is a draft. Once the operator (the person responsible for personal data protection) is finalized, it will be replaced with a formal policy after legal review.
1. What we collect and why
| Category | Data | Purpose | Retention |
|---|---|---|---|
| Google sign-in | Email, name, profile image URL (provided by Google) | Identifying your account, showing authorship | Until you delete your account (or request deletion) |
| Profile and activity | Handle, display name, bio, uploaded skills, comments, upvotes | Providing the community service (public information) | Until deleted or until you delete your account |
| Reports | Reported item, reason, details | Moderation and safety (visible to the operator only) | 1 year after the report is handled |
| Install counts | A hash created from your user ID, or your IP and browser information, combined with a server secret (the original values are not stored) | Preventing duplicate counts from the same person | For as long as the service operates |
| Newsletter | Sending updates | Until you unsubscribe | |
| Contact form | Name (optional), email, inquiry type, message | Reviewing and replying to your inquiry | 1 year after the inquiry is resolved |
Your email is never shown to other users. Your handle, display name, profile image, uploaded skills, and comments are public.
2. Service providers and international transfers
| Recipient | Country / location | Data | Purpose |
|---|---|---|---|
| Supabase Inc. | United States (East, Virginia region) | All data listed in section 1 | Sign-in and database |
| Google LLC | United States | Account information during sign-in | Google sign-in |
| Cloudflare, Inc. | United States and data centers worldwide | Information passed along while handling requests | Website hosting and delivery |
| OpenAI, L.L.C. | United States | Content of uploaded skills (SKILL.md, text files, title, description). No account information | Skill safety review (API requests sent with response storage turned off) |
3. Cookies
We use only essential cookies that keep you signed in, plus one preference cookie (“lang”) that remembers your site language. We do not use analytics or advertising cookies. If we ever introduce them, we will update this policy first.
4. Your rights
You can request access to, correction of, or deletion of your information, deletion of your account, and unsubscribing from emails. You can edit your profile yourself in profile settings. For anything else, please use the contact page.