we collect the minimum needed to run a marketplace: your email to sign you in, your name for display, purchase records, the files sellers upload, and the contact details you give when submitting a skill.
signing in with google or x gives us your basic profile (name, email, avatar, and for x your username). we use it only to identify you and, for sellers who opt in, to show a verified badge. we never post on your behalf and we do not read your messages, contacts, or feeds.
payments are handled by stripe; we never see your card number. we do not sell or share personal data with advertisers. cookies are used only to keep you signed in and, on the blog, to remember which posts you liked.
analytics are first-party and cookie-free. for each page, api call, or download we keep the path, the referring site, utm tags, your country, whether the client looked like a person, a program, or a crawler, and a visitor id that is a hash of your address and browser which changes every day, so it cannot follow you across days. no third-party analytics scripts run here. sellers see aggregate counts for their own skills. raw events are deleted after 13 months.
to delete your account and data, email us and we will remove it within 30 days.