Privacy Policy

Summary

SkillsLLM collects the minimum data needed to operate an AI skills directory and (optionally) authenticate community contributions. We do not sell user data. We do not run ad networks. We do not embed third-party trackers beyond a self-hosted privacy-friendly analytics tool.

Website (skillsllm.com)

Data we collect

• Anonymous analytics via Umami (self-hosted at analytics.skillsllm.com): page views, referrer, browser/OS family, country (from IP, not stored), event clicks. No cookies, no fingerprinting, no cross-site tracking.
• GitHub OAuth profile (only if you sign in): GitHub user ID, username, avatar URL, email. Stored in our PostgreSQL database to attach votes, bookmarks, comments, and submissions to your account.
• Server logs (Caddy + Sentry): standard request metadata (URL, status code, IP for the duration of the request, user-agent). Used for debugging and abuse prevention. Retained ≤ 30 days.

What we do not collect

• No tracking cookies.
• No third-party advertising or marketing pixels.
• No keystroke recording, session replay, or behavioral profiling.
• No data sold to third parties, ever.

SkillsLLM Badge Chrome Extension

The SkillsLLM Badge browser extension injects a small badge onto GitHub repository pages indicating whether the repo is indexed in our catalog.

What the extension reads

• Current page URL — only to extract {owner}/{repo}. The extension does not read page content, form input, cookies, or any other GitHub data.

What the extension sends

• One HTTPS GET request per repo page to https://skillsllm.com/api/extension/lookup?owner=X&repo=Y. No authentication header, no cookies (credentials: "omit"), no body.

What the extension stores

• An in-memory cache of lookup results for the current tab session only. Cleared when you close the tab.
• No chrome.storage, no IndexedDB, no localStorage, no cookies are written by the extension.

Permissions justification

• content_scripts: https://github.com/* — required to read the URL of the current GitHub page and inject the badge UI.
• host_permissions: https://skillsllm.com/* — required to call our lookup API.
• No tabs, storage, scripting, or webRequest permissions are requested.

Third parties

• GitHub — OAuth provider and source of skill metadata. Subject to GitHub's privacy statement.
• Cloudflare DNS — DNS resolution. Cloudflare may log IP addresses per their policy.
• Stripe — payment processing for paid courses (only if you purchase). Subject to Stripe's privacy policy.

Your rights

You can delete your SkillsLLM account (and all associated votes, bookmarks, comments) by emailing hello@skillsllm.com. You can disable analytics by enabling Do Not Track or installing a blocker — Umami respects DNT. You can remove the Chrome extension at any time via chrome://extensions; doing so removes all extension state immediately.

Contact

Privacy questions, deletion requests, or security reports: hello@skillsllm.com. Read more about the project on the About page.