Privacy policy

The short version

Skills is a tool for writing agent skills. Editing happens in your browser. If you create an account, the skills you save and the basics of who you are live in our database. If you publish a skill, it becomes public. There are no ads, and nothing here follows you around the web.

What we collect

You can sign in with Google, with GitHub, or with a link we email you. There are no passwords, so there is no password for us to store or lose. With an account we hold your name, your email address, and, if you used Google or GitHub, the profile photo they share. We store the photo as a link back to Google or GitHub, so your browser fetches it from them when it appears on screen. We also keep your avatar style if you pick one. Sign-in itself is handled by our authentication provider, Neon Auth, and the link is delivered by Resend, our email provider, so your address passes through them on the way to your inbox.

Without an account, the skills you build stay in your browser and leave only when you download them.

Publishing

Publishing a skill makes it public. Anyone with the link can read it, download it, and copy it into their own account as a starting point for their own skill. Published pages are open to search engines, so they can be indexed and can show up in search results.

A skill you have not published is visible only to you. You can unpublish at any time, which takes the public page down, but that cannot reach copies other people already made, pages a search engine has already cached, or anything already downloaded. Publish accordingly, and keep private details out of a skill you intend to share.

Where it lives

Saved skills and account data are stored in a Neon Postgres database. The site is hosted on Vercel, which keeps standard server logs, including IP address and request path, to operate the service. We also read the IP address on our AI requests to rate-limit them, which keeps one visitor from exhausting the shared free allowance. It is used for that check and is not stored alongside your account.

How long we keep things

A skill you save has no expiry date. It stays until you delete it, or until you ask us to close your account. Once it is deleted, the database can still recover it from its own history for 24 hours, and after that it is gone.

An unsaved wizard draft sits in your browser for 30 days after you last touch it, then it is dropped and its storage is cleared. A sign-in link is good for 15 minutes and works once. The counters behind our rate limit are held in memory only and are gone when the server restarts.

Our database runs in Ohio, in the United States. The other services named on this page keep data under their own policies rather than ours: Neon for the database and sign-in, Vercel for hosting and analytics, Resend for email, and Groq for AI suggestions.

AI features

Two features use AI: the guided wizard’s per-step assist, and the “Tighten” button on the description field. They run only when you press them. When you do, the draft you are working on is sent to Groq, which generates the suggestion. That means the request carries the surrounding fields of the draft, not only the one you are editing, because the suggestion is written to fit the rest of the skill.

Groq’s services agreement states that it does not use inputs or outputs to train or fine-tune its models. Suggestions are always shown to you before anything is applied.

Feedback

The feedback form sends us your message and the name of the screen you opened it from, so our first reply is not us asking where you were. If you are signed in, your name and email address go with it, so we can write back without asking. If you are signed out, the email field is optional, and if you leave it empty we have no way to reach you.

Feedback arrives as an email, sent through Resend. We keep those messages the way we keep any other email we receive.

Analytics

We count page views, and we count moments in the app: signing in, including which method you used; starting the guided wizard, reaching each of its steps, and finishing or abandoning it; asking for an AI suggestion and whether you kept it; opening a template; scoring a skill; being blocked from downloading one; downloading, publishing, or remixing one; and sending feedback. That is how we find the steps where people get stuck.

This runs on Vercel Analytics, served from this domain. It sets no cookies and does not follow you to other sites. What we get back is counts and short labels: which step, which template, which sign-in method, and the grade and score a skill was given. It never carries what you wrote, the name of your skill, or anything that identifies you.

Cookies and browser storage

We set a small number of cookies, all of them for signing you in and keeping you signed in. Nothing for ads, nothing cross-site.

The app also keeps a few things in your browser’s local storage: an unsaved wizard draft, so a reload does not lose your work before there is an account to save it to, and your light or dark preference. That data stays on the device and is never sent to us. On a shared or public computer, a draft will still be there for the next person unless you clear the site’s data.

Sharing and deletion

Your data is not sold, and it is not shared beyond the services named above. To delete your account and everything attached to it, email contact@mattdowney.com. Deleting your account removes your published pages, with the same limit described under Publishing: it cannot reach copies or caches that already exist elsewhere.