Privacy Policy

Last updated: February 14, 2026

SkillsCat ("we", "our", or "us") is an open platform for discovering, sharing, and installing AI agent skills. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services.

1. Information We Collect

1.1 Information You Provide

When you use SkillsCat, we may collect:

  • Account Information: When you sign in using GitHub OAuth, we receive account data such as your username, email address, profile image, and GitHub account identifier.
  • Submitted Content: Skills you submit, including repository URLs, uploaded SKILL.md content, and related metadata.
  • Sharing and Collaboration Data: If you share private skills or manage organizations, we store the user IDs or email addresses needed to enforce those permissions.
  • User Preferences and Credentials: Your favorites, API token metadata, and account/session records.

1.2 Information Collected Automatically

We automatically collect certain information when you visit our website:

  • Security and Session Data: Request metadata such as IP address and user-agent may be processed for authentication security, abuse prevention, and rate limiting.
  • Usage Events: We record product events such as submissions, installs, downloads, favorites, and unfavorites with timestamps.
  • Infrastructure Logs: Cloudflare infrastructure may generate operational logs for reliability and security.

2. How We Use Your Information

We use the collected information to:

  • Provide and maintain our services
  • Authenticate your identity and manage your account
  • Process skill submissions or uploads and maintain our catalog
  • Enforce access controls for private, unlisted, and shared skills
  • Generate aggregate usage statistics such as trending and download metrics
  • Provide account features such as API tokens, notifications, and organization permissions
  • Detect and prevent fraud or abuse

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

  • Public Content: Public skills and related public profile metadata are visible to other users.
  • Service Providers: We use providers such as Cloudflare (hosting and infrastructure), GitHub (OAuth and repository APIs), optional OpenRouter or DeepSeek model APIs (for automated skill classification when enabled), and Google Fonts (font delivery).
  • Collaboration Features: If you share a private skill with another user or email address, that permission data is stored and used to grant access.
  • Legal Requirements: When required by law or to protect our rights.

4. Data Storage and Security

Your data is stored primarily on Cloudflare infrastructure, including D1, KV, and R2. We implement reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction.

5. Third-Party Services

Our service integrates with:

  • GitHub: For OAuth authentication and repository metadata or content access.
  • Cloudflare: For hosting, CDN, D1, KV, R2, and security services.
  • OpenRouter / DeepSeek (optional): For automated skill classification if these providers are configured.
  • Google Fonts: For web font delivery.

6. Your Rights

You can:

  • Delete your account from account settings. This removes sessions, tokens, favorites, private skills, and related account data.
  • Understand that public skills are preserved as public records and detached from your account after deletion; signing in again with the same GitHub account can relink them.
  • Manage favorites, API tokens, and shared-skill permissions through product settings.
  • Update core profile information through your GitHub account.
  • Contact us through the GitHub repository for additional privacy requests.

7. Cookies

We use essential cookies for authentication, session management, and UI preferences such as language selection. We do not use advertising cookies or third-party tracking cookies.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the last updated date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us through our GitHub repository.

11. Open Source

SkillsCat is open source software licensed under AGPL-3.0. You can review our source code and data handling practices on our GitHub repository.