AAS Core privacy

Privacy for the AAS Core remote preview.

Publisher: Niccolò Lucioli. Updated 29 October 2026. This notice covers the remote MCP service; local AAS bundles and the website have separate data flows.

Data your client sends

Your client sends MCP tool arguments to the Cloudflare-hosted service. These may include search queries, project goals, skill IDs, manifests and optional selection evidence. Do not send credentials, secrets or sensitive project information. The service cannot read your local filesystem or execute catalog scripts.

Temporary sessions

Arguments and selection traces remain in an isolated session’s memory and are not intentionally persisted. A session is usable for 20 minutes, can be deleted by an MCP DELETE request and can end earlier on eviction. An expiry alarm is scheduled to discard its in-memory server; infrastructure scheduling may delay cleanup.

Abuse prevention

The service processes the connecting IP address and stores a SHA-256 hash with usage counters until the next UTC daily boundary. Expired counters are removed on subsequent guard requests. These hashes are pseudonymous, not anonymous. Application code does not write raw IP addresses to storage.

Service providers and the website

Application request logging is disabled. The remote application uses no advertising, payment service or paid AI model API. Cloudflare processes connection metadata under its own policy. Your AI client processes prompts and outputs under its own policy. These informational pages on aaskills.tech use the website’s existing hosting and aggregate Vercel Web Analytics; query strings and fragments are removed before analytics events are sent. The remote application does not send tool arguments to that analytics service.

Cloudflare privacy policy Website privacy policy

Questions and deletion

Use the support page for privacy questions. Do not disclose private data in public discussions. Active clients can delete their session through MCP; clearing the session does not erase records held independently by your AI client, Cloudflare or GitHub under their own policies.

AAS Core support Back to AAS Core