Privacy Policy

Effective Date: February 15, 2026

SiteSkills ("we," "us," or "our") operates the SiteSkills platform and website at siteskills.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service. By using the Service, you agree to the practices described in this Privacy Policy.

If you do not agree with this Privacy Policy, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect the following information:

• Email address -- used for account identification, login, and communication.
• Password (hashed) -- if you register with email/password authentication. We never store passwords in plain text.
• Display name and profile information -- such as your username, avatar, and bio.
• OAuth profile data -- if you authenticate via GitHub or Google, we receive your name, email address, and profile picture from the respective provider. We do not receive or store your OAuth provider passwords.

1.2 Payment Information

When you purchase a paid skill or subscribe to a Pro plan, we collect:

• Billing name and address -- for invoice and tax purposes.
• Payment method details -- processed and stored by Stripe, our third-party payment processor. SiteSkills does not store your full credit card number, CVV, or other sensitive payment card data on our servers. We retain only a truncated card identifier (e.g., last four digits) and transaction records for our records.

1.3 Usage and Analytics Data

We automatically collect certain information when you use the Service, including:

• Log data -- IP address, browser type and version, operating system, referring/exit pages, and timestamps.
• Usage data -- pages visited, skills browsed and downloaded, search queries, feature usage patterns, and session duration.
• Device information -- device type, screen resolution, and language preferences.

1.4 Skill and Content Data

• Uploaded skills -- if you are a creator, we store the skill packages (ZIP files containing JavaScript/TypeScript code) and associated metadata (title, description, version, tags, screenshots) that you upload.
• Reviews and comments -- any reviews, ratings, or comments you post on the platform.

1.5 Communication Data

• Support requests -- when you contact us at support@siteskills.ai, we retain the content of your correspondence.
• Notification preferences -- your email notification and communication preferences.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Operating the Service

• Creating and managing your account.
• Processing transactions and payments for paid skills and subscriptions.
• Distributing skills from creators to users.
• Enabling creator payouts.

2.2 Improving the Service

• Analyzing usage patterns to improve features and user experience.
• Identifying and fixing bugs, errors, and performance issues.
• Conducting research and development for new features.

2.3 Communication

• Sending transactional emails (account verification, purchase receipts, password resets).
• Sending service-related announcements (policy changes, security alerts, maintenance notices).
• Sending optional marketing communications (you can opt out at any time).

2.4 Safety and Security

• Detecting and preventing fraud, abuse, and malicious activity.
• Enforcing our Terms of Service.
• Moderating uploaded skills and user-generated content.
• Protecting the rights and safety of our users and third parties.

2.5 Legal Compliance

• Complying with applicable laws, regulations, and legal processes.
• Responding to lawful requests from government authorities.

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

3.1 Third-Party Service Providers

We use the following third-party services to operate the platform:

Service	Purpose	Data Shared
Stripe	Payment processing	Billing name, address, payment method, transaction details
Cloudflare	CDN, DDoS protection, DNS	IP address, request headers, traffic data
GitHub OAuth	Authentication	OAuth tokens; we receive your GitHub email, name, and avatar
Google OAuth	Authentication	OAuth tokens; we receive your Google email, name, and profile picture

Each third-party provider operates under its own privacy policy. We encourage you to review their policies:

• Stripe Privacy Policy
• Cloudflare Privacy Policy
• GitHub Privacy Statement
• Google Privacy Policy

3.2 Creator and User Interactions

• If you purchase a paid skill, the creator may receive your display name for the purpose of providing support or license management. Creators do not receive your email address, payment details, or other personal information unless you choose to share it directly.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal processes, such as a subpoena, court order, or government request.

3.4 Business Transfers

If SiteSkills is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service before your information becomes subject to a different privacy policy.

3.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

4. Cookies and Tracking Technologies

4.1 What We Use

We use cookies and similar technologies to operate and improve the Service:

• Essential cookies -- required for the Service to function (e.g., session authentication, CSRF protection). These cannot be disabled.
• Analytics cookies -- used to understand how users interact with the Service, including page views, feature usage, and navigation patterns.
• Preference cookies -- used to remember your settings and preferences (e.g., dark mode, language).

4.2 Third-Party Cookies

Our third-party service providers (such as Cloudflare) may set their own cookies for security and performance purposes.

4.3 Managing Cookies

Most web browsers allow you to manage cookie preferences through their settings. You can choose to block or delete cookies, but doing so may affect the functionality of the Service. Essential cookies are required for the Service to operate.

4.4 Do Not Track

We currently do not respond to "Do Not Track" browser signals, as there is no industry-standard specification for how to do so. We will update this policy if a standard is established.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data -- retained until you delete your account.
• Transaction and payment records -- retained for a minimum of 7 years to comply with financial and tax regulations.
• Usage and analytics data -- retained in identifiable form for up to 24 months, after which it is aggregated or anonymized.
• Support correspondence -- retained for up to 3 years after the last interaction.
• Uploaded skills -- retained until removed by the creator or by SiteSkills in accordance with our Terms of Service.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as maintaining financial records).

6. Your Rights Under GDPR and Other Privacy Laws

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with applicable data protection laws, you have the following rights:

6.1 Right of Access

You have the right to request a copy of the personal data we hold about you. You can access much of your data directly through your account settings.

6.2 Right to Data Portability (Export)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. SiteSkills provides a built-in data export feature in your account settings that allows you to download your data at any time.

6.3 Right to Erasure (Deletion)

You have the right to request deletion of your personal data. SiteSkills provides a built-in account deletion feature that allows you to delete your account and associated data. Upon deletion, we will erase your personal data within 30 days, subject to the retention exceptions noted in Section 5.

6.4 Right to Rectification

You have the right to request correction of any inaccurate personal data we hold about you. You can update most of your information directly through your account settings.

6.5 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data.

6.6 Right to Object

You have the right to object to the processing of your personal data for certain purposes, including direct marketing.

6.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6.8 Exercising Your Rights

To exercise any of these rights, you can:

• Use the built-in features in your account settings (for access, export, and deletion).
• Contact us at support@siteskills.ai for any other requests.

We will respond to your request within 30 days. We may ask you to verify your identity before processing your request. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

6.9 Legal Basis for Processing (EEA Users)

If you are in the EEA, our legal bases for processing your personal data are:

• Contractual necessity -- processing necessary to perform our contract with you (e.g., providing the Service, processing payments).
• Legitimate interests -- processing necessary for our legitimate interests (e.g., improving the Service, preventing fraud), provided those interests are not overridden by your rights.
• Consent -- processing based on your consent (e.g., marketing emails), which you may withdraw at any time.
• Legal obligation -- processing necessary to comply with applicable laws.

7. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as promptly as possible.

If you are a parent or guardian and believe that your child under 13 has provided personal information to us, please contact us at support@siteskills.ai so that we can take appropriate action.

Users between the ages of 13 and 18 may use the Service with the consent of a parent or guardian.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit -- all data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Encryption at rest -- sensitive data stored on our servers is encrypted at rest.
• Password hashing -- user passwords are hashed using industry-standard algorithms. We never store plain-text passwords.
• Access controls -- access to personal data is restricted to authorized personnel who need it to operate the Service.
• Infrastructure security -- our infrastructure is protected by Cloudflare's security services, including DDoS protection and web application firewall.
• Regular security reviews -- we conduct regular reviews of our security practices and infrastructure.

While we strive to protect your information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents in accordance with applicable laws.

9. International Data Transfers

If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our servers or service providers are located. By using the Service, you consent to such transfers. Where required by applicable law, we implement appropriate safeguards (such as Standard Contractual Clauses) for international data transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Effective Date" at the top of this page.
• Post the revised Privacy Policy on the Service.
• Notify you via email or a prominent notice on the platform for significant changes.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

SiteSkills Email: support@siteskills.ai Website: https://siteskills.ai

For GDPR-related inquiries, you may also contact us at the email address above with the subject line "GDPR Request."