Politique de confidentialité

Skills.pub operates skills.pub and is the data controller for the personal data described here. Contact us about privacy at onboard@skills.pub.

Payments for credit packs are handled by Waffo Pancake as merchant of record. Waffo Pancake is an independent controller of the payment data it collects at checkout and handles it under its own privacy policy.

Data you give us:

• Account data: your email address. With Google sign-in, also your Google account ID, name and profile picture. With email sign-in, a salted hash of your password (never the password itself).
• Content you create: skill submissions (repository URL and the details you enter), skill collections and their visibility setting.
• Purchase records: order number, credit pack, amount, currency, payment status and credit balance history. We do not receive or store full card numbers.
• Messages: the name, email address and message you send through the contact form or by email.

Data collected automatically:

• Request logs: our hosting provider, Cloudflare, processes IP addresses, browser user agent and request details to deliver pages and protect the site from abuse.
• Usage statistics: page views, searches, installs, and impressions and clicks on sponsored slots. These are linked to a random per-tab session ID, not to your account, IP address or email, and are stored only as event types and counts.

Public data: skill names, descriptions, source code and repository metadata that authors publish on GitHub.

We do not sell your personal data, and we do not use it to train AI models.

On your first visit a banner asks whether you accept advertising cookies. Google AdSense is not loaded unless you accept, and rejecting is as easy as accepting. You can change your choice at any time with "Cookie settings" at the bottom of every page.

We do not use other analytics or tracking tools. You can block or delete cookies in your browser; signing in will not work without the session cookie. You can control personalised Google ads at adssettings.google.com, and read how Google uses data at policies.google.com/technologies/partner-sites.

We do not sell or rent personal data, including as "selling" or "sharing" is defined in the CCPA/CPRA. We share data only with these service providers, and only as needed for their task:

• Cloudflare: hosting, database, file storage, security and request logs.
• Waffo Pancake: merchant of record for credit purchases. It receives the email address and payment details you enter at checkout and the order details, and processes card data under PCI-DSS.
• Creem: payment processor for sponsorship subscriptions bought before credits were introduced, and for credit purchases made through its checkout.
• Google: Google sign-in, and advertising through AdSense.
• Resend: delivery of service emails.
• DeepSeek: automated review of submitted skills and promotions. It receives only the public skill text (name, description and SKILL.md), never account or payment data.

We may also disclose data when the law requires it, to protect the rights and safety of users or the public, or to a successor if the Service is transferred.

• All traffic is encrypted with HTTPS (TLS).
• Passwords are stored as salted PBKDF2-SHA256 hashes; sessions use signed, HTTP-only cookies.
• Production data is accessible only to the operator, with least-privilege access.
• Card data is handled only by our PCI-DSS compliant payment providers.

If a breach affects your personal data, we will notify you and the competent authority without undue delay, and within 72 hours where the law requires it.

Depending on where you live, you have the right to:

• access the personal data we hold about you and get a copy of it;
• correct inaccurate data;
• delete your data and close your account;
• receive your data in a portable format;
• object to processing based on legitimate interests, or restrict processing;
• withdraw consent at any time, without affecting earlier processing;
• if you are a California resident, know, delete and correct your data, and not be discriminated against for using these rights;
• complain to your local data protection authority.

To use these rights, email onboard@skills.pub from your account email. We reply within 30 days, and may ask you to confirm your identity first.

We send only service emails related to your account, submissions, purchases and promotions. We do not send marketing emails. If we start, we will ask for your consent first and every message will include an unsubscribe link.

Our providers may process data outside your country, including in the United States. Where data leaves the EEA, UK or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. For users in mainland China, the Service is hosted outside mainland China, so using it means your personal data is provided to the overseas providers listed in section 5; we process it as the Personal Information Protection Law requires.

The Service is not intended for children under 16, and accounts and purchases require users to be 18 or older. We do not knowingly collect children's data. If you believe a child has given us personal data, contact onboard@skills.pub and we will delete it.

The Service links to GitHub repositories and other sites we do not control. Their own privacy policies apply when you visit them.

We may update this policy. We will email registered users about material changes at least 14 days before they take effect. The version and effective date at the top of this page show the current text. If a translation differs from the English text, the English text governs.

• Skills.pub
• Email: onboard@skills.pub
• Website: https://skills.pub