Privacy Policy

We collect the following information when you browse the catalog, create an account, purchase or download a Skill, authorize the command-line installer, contact support, or otherwise use the Service:

• Account data: name, email address, password authentication records, email-verification state, and Google account identifiers if you choose Google sign-in.
• Purchase and entitlement data: plan, price, transaction status, payment-provider customer and checkout identifiers, billing period, and the Skills your account has unlocked. We do not store complete payment-card numbers.
• Skill activity: favorites, downloads, installation events, and timestamps.
• Device authorization data: device-code authorization state, token scope, token digests, and revocation state. We store a one-way digest, never the raw access token.
• Technical and security data: IP address, browser and device information, request logs, cookies, language and theme preferences, and error information.
• Support data: messages and contact details you send us.

We do not inspect files you create locally with an installed Skill merely because you downloaded it. If a Skill instructs you to use a third-party AI or media provider, information you send there is governed by that provider's own privacy policy.

We use information to:

• create and secure accounts, and authenticate browser and command-line access;
• provide the catalog, downloads, purchases, subscriptions, updates, and favorites;
• process and verify payments, prevent fraud, and keep accounting records;
• send account, security, support, and service messages;
• measure performance and improve the product;
• investigate abuse, enforce our Terms, and comply with legal obligations.

We do not use your account data to train a general-purpose AI model, and we do not sell personal information.

We share information only as needed to operate the Service:

• Payment providers (Creem, Stripe, or Paddle — whichever processes your checkout) for payment processing, fraud prevention, billing, and tax handling;
• Google, when you choose Google sign-in;
• our email provider for verification codes, transactional messages, and support replies;
• as required to comply with law, respond to valid legal process, prevent fraud or harm, or enforce our agreements.

We use essential cookies and browser storage for sign-in sessions, security, language, theme, and your cookie-consent choice. See our Cookie Policy for details and browser controls.

We keep account and entitlement records while your account is active and as needed to provide purchased access. Payment, fraud-prevention, security, and transaction records may be kept longer where reasonably necessary for legal, tax, accounting, dispute, or abuse-prevention purposes. When data is no longer needed, we delete, anonymize, or isolate it; backup copies may persist for a limited period before routine deletion.

We use administrative, technical, and organizational safeguards designed to protect information, including scoped authorization, token hashing, access controls, and encrypted transport. No system is completely secure — contact us promptly at support@skillon.dev if you believe your account or token has been compromised.

Depending on where you live, you may have the right to access, correct, delete, restrict, or receive a copy of your personal information, or to object to certain processing. You can update account details, cancel a subscription, or delete your account through the available controls, or email us at support@skillon.dev to make a request. We may need to verify your identity first, and some information may be retained where required for transactions, security, or legal compliance.

Our service providers may process information in countries other than your own, with appropriate safeguards where required. Privacy protections may differ between jurisdictions.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law requires a higher minimum age, you must meet that age or use the Service with valid parental or guardian authorization.

We may update this Policy as the product or law changes. We will update the date above and provide additional notice for material changes when appropriate.

For privacy questions or requests: support@skillon.dev.