Alyn privacy policy. In plain words.

1The short version

• You can browse Alyn, use the CLI and connect Alyn MCP without an account.
• If you sign in, we store what you need for your account: your name, email, avatar and the things you create.
• We do not sell your data, we do not show ads and we do not use tracking or advertising cookies.
• You can delete your account and everything in it yourself, at any time, in your settings.

2What we collect

We keep this list short on purpose. Here is everything, grouped by where it comes from.

• Account data. When you sign in with Google, we receive your name, email address and profile picture. Google never shares your Google password with us. If you sign up with email instead, we store your email and a securely hashed password, never the password itself. Passkeys stay on your device; we only keep the public key.
• What you create. Liked skills, playlists, skill submissions and, if you set one up, your public Curator page with handle, bio, links, website and company.
• Usage of the site. Our hosting provider gives us aggregated statistics: pages viewed, referring site, device type and country. We use them to see what is useful. They are not tied to your account.
• CLI and MCP usage. When you install a skill with the Alyn CLI, it sends the skill name, the agent you chose and the CLI version, so we can count installs. When your agent uses Alyn MCP, we count which skills were recommended or loaded. We do not store the task text you send, your code or your files.
• Technical data. Like every website, our servers see your IP address. We use it briefly in memory to stop abuse (rate limits) and do not save it with your account or your installs.

3How we use it

• To run your account and show your likes, playlists and Curator page.
• To rank skills. Install and usage counts feed into the rankings as totals, never per person.
• To send you a short welcome email after you sign up, and service emails about your account when needed. No newsletters unless you ask for them.
• To keep Alyn safe: preventing spam, fake installs and abuse.
• To understand which pages help people and improve them.

4What is public

Your Curator page and published playlists are public on purpose, including your display name, avatar, handle, bio and links. Skill submissions are public once listed. Liked skills and unpublished playlists stay private to you.

Your email address is never shown publicly.

5Who we share it with

We never sell or rent personal data. We only work with service providers that help us run Alyn, and only for that purpose:

• Our hosting, database and email providers, which store and process data on our behalf.
• Google, for sign-in with Google.
• GitHub, from which we load public skill data and author avatars. Your browser may load these images directly from GitHub.
• YouTube, only when you press play on a video. Videos use YouTube's privacy-enhanced mode and load nothing until you click.

6Cookies and local storage

Alyn does not use advertising or tracking cookies. To keep you signed in, we store a session token in your browser. We also keep a few small items in local storage, like a like you started before signing in, so we can finish it for you afterwards. You can clear all of it in your browser settings.

7How long we keep it

• Account data and what you create: until you delete it or your account.
• Install and usage counts: kept as anonymous totals for the rankings.
• Short-lived server logs from our hosting provider: deleted automatically after a limited time.

8Your choices and rights

You can edit your profile and delete playlists, likes or your whole account in your settings. Deleting your account removes your profile, playlists, saved skills and uploaded images for good.

Depending on where you live, for example in the EU, UK or California, you also have the right to access a copy of your data, correct it, delete it, object to or restrict how we use it, and complain to your local data protection authority. We give these rights to everyone, wherever you live.

To turn off CLI install counting, set ALYN_TELEMETRY=0 or DO_NOT_TRACK=1 in your environment.

9Security

Data is encrypted in transit, access to the database is restricted by row-level rules, and only you can change your own account. No system is perfect, but we treat your data the way we would want ours treated.

10Where data is stored

Our providers may process data in the United States, the European Union and other countries. Where required, transfers are covered by appropriate safeguards such as standard contractual clauses.

11Children

Alyn is not meant for children. You need to be at least 16 to create an account.

12Changes

If we change this policy, we update the date at the top. If a change matters for how we use your data, we tell signed-in users before it takes effect.