Privacy Policy

• • Account data — email address and hashed password when you sign up.
• • Usage metrics — API request counts, deployment events, and error rates, aggregated daily.
• • Payment data — processed and stored exclusively by Stripe. We never see or store full card numbers.
• • Server logs — IP address, user-agent, and request timestamps retained for 30 days for security monitoring.

• • Operate, maintain, and improve the freeMCP.dev service.
• • Enforce rate limits and prevent abuse.
• • Send transactional emails (verification, billing receipts).
• • Generate anonymized, aggregate analytics — we do not sell personal data.

• • Account data is retained while your account is active.
• • Usage metrics are aggregated daily and individual request logs are purged after 30 days.
• • You can request full account deletion by emailing [email protected].

• • We use a single, secure, HTTP-only session cookie for authentication.
• • No third-party tracking scripts or advertising cookies are loaded.
• • No cross-site tracking or fingerprinting.

• • Access — request a copy of all data we hold about you.
• • Correction — update inaccurate information from your dashboard.
• • Deletion — request complete account and data removal.
• • Portability — export your deployment configurations and API key metadata.
• • Contact [email protected] for any data rights requests.

All data is encrypted in transit (TLS 1.2+) and at rest. API keys are bcrypt-hashed. Sessions use AES-256 encryption. See our Security page for details.

We may update this policy to reflect changes in our practices or for legal reasons. Material changes will be communicated via email. Continued use of the service after changes constitutes acceptance.