Privacy Policy | Skillry

1. Scope

This Privacy Policy explains how Skillry collects, uses, shares, and protects information when you browse the catalog, create an account, purchase or download a Skill, authorize the CLI, submit a Skill, contact support, or otherwise use our Services.

2. Information we collect

Information you provide

Account data: name, email address, password authentication records, email-verification state, profile image, and Google account identifiers if you choose Google sign-in.
Support and communication data: messages and contact details you send us.
Skill submission data: packages, SKILL.md files, scripts, references, previews, descriptions, tags, prompts, review information, and related metadata you submit.
Newsletter data: your email address when you subscribe or when account creation includes newsletter enrollment. You can unsubscribe using the link in an email.

Information generated when you use the Services

Purchase and entitlement data: plan, price, transaction status, payment-provider customer and checkout identifiers, billing period, and the Skills your account has unlocked. We do not store complete payment-card numbers.
Skill activity: favorites, download and installation events, requested Skill, access result, and timestamps.
CLI authorization data: device authorization state, token scope, token digest, revocation state, and related timestamps. We store a one-way digest rather than the raw CLI access token.
Technical and security data: IP address, browser and device information, request logs, cookies, language and theme preferences, error information, and security signals.
Analytics data: page and feature interactions when an analytics service is enabled. The providers in use may vary with our deployment configuration.

We do not inspect files you create locally with an installed Skill merely because you downloaded or installed it. If a Skill instructs you to use a third-party AI or media provider, information you send to that provider is governed by its own privacy policy.

3. How we use information

We use information to:

create and secure accounts;
authenticate browser and CLI access;
provide the catalog, downloads, purchases, subscriptions, updates, and favorites;
process and verify payments, prevent fraud, and maintain accounting records;
validate, review, publish, and support submitted Skills;
send account, security, support, and service messages;
send newsletters where enabled and allow unsubscribe;
measure performance and improve the product;
investigate abuse, enforce our Terms, and comply with legal obligations; and
protect the rights, safety, and integrity of users, Skillry, and third parties.

We do not use customer account data or private Skill submissions to train our own general-purpose AI model.

We share information only as needed to operate the Services, including with:

Cloudflare for website delivery, Workers execution, D1 database storage, R2 object storage, security, and related infrastructure;
Stripe or another payment provider configured at checkout for payment processing, fraud prevention, billing, and tax-related functions;
Google when you choose Google sign-in;
email and newsletter providers for verification, transactional messages, support, and subscribed updates;
analytics and error-monitoring providers when enabled; and
AI or media processing providers when an authorized Skill-submission workflow requires package review, translation, or preview generation.

We may also disclose information to comply with law, respond to valid legal process, prevent fraud or harm, enforce agreements, or support a merger, financing, acquisition, or sale of assets. We do not sell personal information for money.

5. Cookies and local storage

We use essential cookies and browser storage for sessions, security, language, theme, and required product preferences. Analytics services may set additional cookies when enabled. See our Cookie Policy for more information and available browser controls.

6. Retention

We retain account and entitlement records while your account is active and as needed to provide purchased access. Payment, fraud-prevention, security, and transaction records may be retained longer where reasonably necessary for legal, tax, accounting, dispute, or abuse-prevention purposes. Skill submission and publication records may be retained to preserve review history and protect package integrity.

When data is no longer needed, we delete, anonymize, or isolate it according to operational and legal requirements. Backup copies may remain for a limited period before routine deletion.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information, including scoped authorization, token hashing, access controls, private object storage, and encrypted transport. No system is completely secure, so we cannot guarantee absolute security. Contact us promptly if you believe your account or token has been compromised.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. You can update certain account information, revoke CLI access, unsubscribe from marketing email, cancel a subscription, or delete your account through available controls. You may also contact us to make a privacy request.

We may need to verify your identity before completing a request. Some information may be retained where required for transactions, security, legal compliance, or the rights of others. You may have the right to complain to your local data-protection authority.

9. International processing

Our service providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers. Privacy protections may differ between jurisdictions.

10. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law requires a higher minimum age, you must meet that age or use the Services with valid parental or guardian authorization.

11. Changes to this Policy

We may update this Policy as the product or law changes. We will update the date above and provide additional notice for material changes when appropriate.

12. Contact

For privacy questions or requests, email [email protected].