Privacy Policy

This Privacy Policy explains what information SkillMD collects when you use skillmd.com, its API, command-line tools, and MCP server (together, the "Service"), how we use it, and the choices you have. We collect as little as we can to run the Service, and we do not sell your data.

1. Information we collect

Account information. When you sign in, our authentication provider shares basic profile details with us — such as your email address, name, and username — which we use to create and operate your account.

Content you publish. Skills, plugins, profile details, and other content you choose to publish are public by design and are attributed to your account.

Messages you send us. If you use the contact form or email us, we receive the name, email address, and message you provide.

Usage and technical data. Like most services, we process server logs that include IP addresses, request paths, timestamps, and user-agent strings. We use this data for security, rate limiting, abuse prevention, debugging, and aggregate statistics such as download counts.

We do not knowingly collect payment details or sensitive personal information, and the Service is not directed to children under 13.

2. Cookies

We use a small number of cookies that are strictly necessary to run the Service: a session cookie to keep you signed in and cookies set by our authentication provider during sign-in. We do not use advertising or cross-site tracking cookies.

3. How we use information

• To provide and operate the Service, including hosting the skills you publish and attributing them to you.
• To keep you signed in and secure your account.
• To protect the Service: rate limiting, abuse detection, and incident investigation.
• To respond when you contact us.
• To understand usage in aggregate and improve the Service.

We do not use your information for advertising, and we do not sell or rent it to anyone.

4. How information is shared

We share data only with the service providers we rely on to operate the Service — for example authentication, hosting, and network infrastructure — and only to the extent needed to run it. These providers process data under their own contractual and legal obligations. Beyond that, we disclose information only if required by law, to protect the rights and safety of the Service and its users, or as part of content you have chosen to make public.

5. Public content

The registry is public. Skills you publish, your handle, and activity attached to them (such as publishing history) are visible to anyone and may be downloaded, cached, or indexed by third parties, including search engines and AI agents. Unpublishing a skill removes it from the registry, but copies already downloaded by others are outside our control.

6. Data retention

We keep account data for as long as your account exists. Server logs used for security and rate limiting are retained for a limited period and then deleted or aggregated. Contact-form messages are kept as long as needed to handle your request. If you delete your account, we remove your personal information within a reasonable period, except where we must keep it for legal, security, or abuse-prevention reasons.

7. Security

We use industry-standard measures to protect your data, including encryption in transit and access controls on our infrastructure. No online service can guarantee absolute security, but we work to keep the surface small: we store little, and what we store is limited to what the Service needs.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to certain processing. You can exercise these rights — including requesting account deletion — by emailing hi@skillmd.com. We respond to legitimate requests within the timeframes required by applicable law.

9. International transfers

The Service runs on globally distributed infrastructure, so your information may be processed in countries other than your own. Where required, transfers are protected by appropriate safeguards implemented by our service providers.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the effective date above and, for material changes, provide reasonable notice on the Service.

11. Contact

Questions about privacy or your data? Email hi@skillmd.com.