Privacy Policy

Last updated: March 2026

1. What We Collect

When you sign in via Google or GitHub, we receive and store the following information from your OAuth provider:

  • Email address — to identify your account
  • Display name — shown on skills you submit
  • Profile picture URL — displayed on your profile and skill cards
  • OAuth provider — whether you signed in with Google or GitHub

We also store content you create (submitted skills) and your activity on the platform (downloads, achievements, points).

2. What We Do NOT Collect

  • Passwords (authentication is handled entirely by Google/GitHub)
  • Payment or financial information
  • Tracking cookies or analytics data
  • Browsing behavior outside this platform
  • Location data

3. How We Use Your Data

  • To provide and maintain your account
  • To display your name on skills you share
  • To track your points and achievements
  • To enforce the download gating model (free vs. contributor access)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Processing

Your data is stored in a Turso database (hosted SQLite). The database is accessed exclusively through server-side API routes — there is no direct client-to-database connection. The application is hosted on Vercel.

5. Your Rights (GDPR)

You have the right to:

  • Access — Download all your data from your profile page
  • Rectification — Edit your submitted skills at any time
  • Erasure — Delete your account and all associated data from your profile page. This action is immediate and irreversible.
  • Portability — Export your data in JSON format from your profile page

6. Cookies

We use a single HTTP-only session cookie to maintain your login state. This is a strictly necessary cookie and does not require consent under GDPR. We do not use tracking cookies, analytics cookies, or third-party cookies.

7. Skill Content

Skills you submit are reviewed automatically for quality and security. Approved skills are publicly visible. By submitting a skill, you confirm that the content is your own work and does not contain malicious instructions, prompt injection attacks, or copyrighted material.

8. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact

For questions about this privacy policy or to exercise your data rights, please contact us through the GitHub repository.

Acknowledgements