Privacy Policy

Effective Date: March 1, 2026

This Privacy Policy describes how Skillful.sh ("the Service", "we", "us", or "our"), owned and operated by Basel Ismail, collects, uses, and protects information when you use the Service, accessible at https://skillful.sh. By using the Service, you consent to the data practices described in this policy.

1. Information We Collect

Skillful.sh does not currently require user accounts or authentication. The information we collect is limited to data generated through your use of the Service.

1.1 Automatically Collected Data

When you visit the Service, we automatically collect certain information, including:

Usage Analytics: Pages visited, features used, time spent on pages, click patterns, and navigation paths
Search Queries: Search terms, filter selections, sort preferences, and category browsing patterns
Technical Data: IP address, browser type and version, operating system, device type, screen resolution, referring URL, and language preferences
Performance Data: Page load times, errors encountered, and service availability metrics

1.2 Cookies and Local Storage

We use the following types of cookies:

Essential Cookies: Required for basic site functionality, including theme preferences, language settings, and session management
Analytics Cookies: Used to understand how visitors interact with the Service, including page views, session duration, and feature usage
Preference Cookies: Store your preferences such as display settings, default filters, and sort orders

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

1.3 Information We Do Not Collect

The Service does not currently collect personal identification information such as names, email addresses, or payment information. We do not require user registration or authentication to use the Service.

2. How We Use Information

We use the collected information for the following purposes:

Service Operation: To provide, maintain, and improve the functionality of the Service
Analytics and Improvement: To analyze usage patterns, understand user needs, and improve search relevance, content organization, and feature development
Personalization: To remember your preferences and provide a consistent experience across visits
Security and Abuse Prevention: To detect and prevent fraud, abuse, and unauthorized access to the Service
Aggregate Insights: To generate anonymized, aggregate statistics about ecosystem trends and tool adoption
Legal Compliance: To comply with applicable legal obligations, resolve disputes, and enforce our Terms of Service

3. Aggregated Public Data

The primary function of Skillful.sh is to aggregate publicly available data about AI tools, MCP servers, skills, and agents from third-party directories, registries, and package managers. This aggregated data includes:

Tool names, descriptions, and categories
Repository URLs, star counts, and contributor information
Download statistics and adoption metrics
License types and compatibility information
Security analysis results and vulnerability data
Cross-directory listing information

This data is sourced from publicly accessible APIs and websites. If you are a tool author and wish to update or request removal of your tool's information, please contact us at contact@skillful.sh.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following limited circumstances:

Service Providers: We may share data with third-party service providers who assist in operating the Service, such as hosting providers and analytics platforms, subject to contractual obligations to protect your data
Aggregate Statistics: We may share anonymized, aggregate usage statistics that cannot be used to identify individual users
Legal Requirements: We may disclose information when required by law, regulation, legal process, or governmental request
Protection of Rights: We may disclose information to protect the rights, property, or safety of the Service, our users, or others
Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction

5. Data Retention

We retain automatically collected data for the following periods:

Server Logs: Retained for up to 90 days, then automatically deleted
Analytics Data: Retained in aggregate form indefinitely; individual session data is anonymized after 12 months
Cookie Data: Essential cookies expire at the end of your session or within 1 year; analytics cookies expire within 2 years

Aggregated public data about AI tools is retained as long as it remains relevant and the tools are actively maintained.

6. Data Security

We implement industry-standard security measures to protect the data we collect, including:

Encrypted connections via HTTPS/TLS for all data in transit
Regular security updates and vulnerability patching
Access controls and authentication for administrative systems
Regular backups and disaster recovery procedures

While we take reasonable measures to protect information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

7. Third-Party Services

The Service may contain links to third-party websites, repositories, and external directories. This Privacy Policy applies only to Skillful.sh. We are not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you visit through links on our Service.

We may use third-party analytics services to help us understand how the Service is used. These services may collect information about your use of the Service in accordance with their own privacy policies.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your data:

Access: Request information about the data we have collected about you
Deletion: Request deletion of data associated with your usage
Opt-Out: Disable non-essential cookies through your browser settings
Do Not Track: We respect Do Not Track (DNT) browser signals where technically feasible
Data Portability: Request a copy of your data in a portable format where applicable

To exercise any of these rights, please contact us at contact@skillful.sh. We will respond to your request within 30 days.

9. International Data Transfers

The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers.

10. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect information from children under 16. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete such information promptly.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information.

To exercise your CCPA rights, please contact us at contact@skillful.sh.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including the right of access, rectification, erasure, restriction of processing, data portability, and objection. Our legal basis for processing your data is our legitimate interest in operating and improving the Service.

To exercise your GDPR rights or lodge a complaint, please contact us at contact@skillful.sh. You also have the right to lodge a complaint with your local data protection authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this page periodically. Material changes will be communicated through a notice on the Service.

14. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: contact@skillful.sh
Website: https://skillful.sh
Owner: Basel Ismail