Privacy Policy

Who we are

SkillsRadar (skillsradar.dev) is a catalog and distribution platform for Agent Skills and Workflows. This Privacy Policy explains how we collect, use, store, and share information when you use our website, APIs, and related services.

Contact: support@skillsradar.dev

Information we collect

Account data: email address, display name, OAuth profile identifiers (Google/GitHub), password hash (if you use password login), and account preferences.

Billing data: plan and one-time Skill purchase records, payment status, and provider references. Card numbers and full payment instrument details are processed by our Merchant of Record (Creem); we do not store full card numbers on SkillsRadar servers.

API usage data: API keys you create, request timestamps, endpoint paths, response status codes, rate-limit counters, and approximate volume used to enforce plan limits and prevent abuse.

Product usage data: pages viewed, Skills/Workflows opened, installs/downloads, saves/likes, search queries, locale/theme preferences, and similar product analytics.

Creator submissions: titles, summaries, package contents, demo media URLs/descriptions, and review metadata you submit to publish on the catalog.

Support communications: emails and messages you send to support@skillsradar.dev.

Technical data: IP address, user agent, device/browser type, cookies or local storage needed for authentication and preferences, and security signals (for example Turnstile challenges).

How we use information

Provide and operate the catalog, accounts, downloads, Premium entitlements, and developer API.

Process subscriptions and paid Skill purchases via Creem, fulfill access, and prevent fraud.

Enforce rate limits, detect abuse, and apply content-safety screening where prompts or visual-generation materials are submitted through SkillsRadar.

Communicate about account, billing, security, and product updates you opt into.

Improve product quality, search relevance, and documentation.

Comply with legal obligations and respond to lawful requests.

Account and API usage data

Account records are tied to your user ID and email. We use them to authenticate you, show entitlements, and provide customer support.

API keys are hashed or stored securely and associated with your account. Usage metrics (counts, timestamps, and endpoint classes) are retained to apply plan quotas, investigate abuse, and generate aggregate product insights.

We do not sell your personal account or API usage data. We may share limited billing and fraud signals with Creem as needed to process payments and meet Merchant of Record requirements.

Visual-generation and moderation data

SkillsRadar is primarily a catalog: image/video generation usually runs on your local agent with your own provider keys, not on our servers.

When you submit prompts or visual Skill/Workflow materials through SkillsRadar endpoints that accept generation-related text, we may screen that text with Creem’s Content Moderation API and retain moderation decisions (allow / flag / deny), prompt text needed for the decision, external IDs, and timestamps for safety auditing and compliance.

Cookies and local storage

We use essential cookies or local storage for session authentication, locale, and theme. Analytics may use first-party events. We do not use third-party advertising cookies as a core part of the product.

Sharing

Service providers that help us operate the product (hosting, email delivery, payment processing via Creem, content moderation via Creem, and security tooling).

Legal, safety, or fraud prevention disclosures when required or reasonably necessary.

Business transfers, if we are involved in a merger, acquisition, or asset sale, subject to appropriate confidentiality.

Retention

We retain account and billing records for as long as your account is active and as needed for legal, tax, and dispute resolution purposes.

API usage metrics are retained for a limited operational window sufficient for quota enforcement and abuse review, then aggregated or deleted.

Moderation logs related to blocked or flagged prompts may be retained longer for safety compliance.

Your choices

You may update profile settings, manage email preferences, cancel subscriptions from your account billing page, and revoke API keys.

To request access, correction, or deletion of personal data, email support@skillsradar.dev. We may need to retain certain records for legal or payment obligations.

Security

We use industry-standard controls such as TLS in transit, access controls, and hashed credentials. No method of transmission or storage is 100% secure.

Children

SkillsRadar is not directed to children under 16. If you believe a child has provided personal data, contact support@skillsradar.dev.

International transfers

We and our processors may process data in the United States and other countries where our infrastructure or payment partners operate.

Changes

We may update this policy. Material changes will be reflected by updating the effective date on this page. Continued use after changes constitutes acceptance of the updated policy.