Privacy

What the MCP stores. For each call: the tool name, whether the caller was keyed or not, tokens returned, latency, and the client name the agent announces. Prompts, file contents, and code are not stored. No-key callers are counted by a hash of the IP with a salt that rotates daily; the raw IP is not kept.

Accounts. When keys open, an account holds the email and account id from GitHub or Google, organization membership, keys (stored hashed), and usage counts. Payment details are held by the merchant of record, not by Wellworn.

Submissions. Traps and verdict requests you submit are stored with your key id so a reviewer can follow up, and published with attribution if you choose.

Website analytics. Cloudflare Web Analytics, which sets no cookies and stores no personal data.

Retention. Usage rows are kept for 13 months for billing. Accounts are deleted on request within 30 days.

Hosting. Servers in the European Union behind Cloudflare. Backups are encrypted and stored with Cloudflare R2.

Requests. support@wellworn.dev.