Jeffrey's Skills.md

Privacy Policy

Last updated: January 31, 2026

Jeffrey's Skills.md ("we", "us", "our") operates a subscription service for Claude Code skills. This policy explains what data we collect and how we use it.

What We Collect

We collect the following information:

  • Account information — Your email address and name from Google OAuth when you sign in
  • Payment information — Processed and stored by Stripe or PayPal, not us. We receive only confirmation of payment status.
  • Usage data — Which skills you view, download, or install, and when. This helps us understand what's useful and improve the service.
  • Optional install telemetry — If you explicitly opt in, we collect anonymous install success/failure events with platform metadata (OS, architecture, distro), install method, version, duration, and failure stage/error code. This data is used only to diagnose installation issues. We do not store IP addresses or personal identifiers.
  • Your uploaded content — Skills you upload for personal storage or sharing

Install telemetry is opt-in only. To enable it, set JSM_TELEMETRY=1 when running the installer. You can disable it at any time by removing that environment variable.

What We Do With It

  • Provide the service — Authentication, subscription management, skill delivery
  • Transactional emails — Receipts, important account notices, security alerts
  • Product improvement — Aggregate analytics to understand usage patterns (not tied to your identity)
  • Install diagnostics (opt-in) — Analyze anonymous install telemetry to improve reliability across platforms

What We Don't Do

  • We do not sell your data to anyone
  • We do not share your data with third parties except our service providers listed below
  • We do not send marketing emails unless you explicitly opt in
  • We do not use your data for advertising

Data Retention

  • While subscribed + 30 days — We retain your account data while you have an active subscription and for 30 days after cancellation
  • After deletion — We keep only anonymized, aggregate usage statistics that cannot be tied back to you
  • Payment records — Retained as required by law for accounting purposes
  • Install telemetry — Retained for up to 30 days, then deleted. We keep only aggregated, non-identifiable summaries after deletion.

Your Rights

  • Download your data — Export your data from Settings or contact support
  • Delete your account — Use the account deletion option in Settings or contact support
  • Correct your information — Update your profile in Settings

Security

  • All data is encrypted in transit (HTTPS/TLS)
  • Data at rest is encrypted in our database (Supabase)
  • We don't store passwords — authentication is handled via Google OAuth
  • Payment processing is handled by PCI-compliant providers (Stripe, PayPal)

Service Providers

We use the following third-party services to operate:

  • Supabase — Database, authentication, and file storage
  • Stripe — Payment processing
  • PayPal — Payment processing
  • Resend — Transactional email delivery
  • Vercel — Web hosting and deployment

Each provider processes data only as necessary to provide their service.

Changes

We may update this policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use after changes take effect constitutes acceptance.

Contact

Questions about this policy? Contact us at legal@jeffreys-skills.md