Privacy Policy

SkillTotal is designed to work without accounts and with minimal data. This page describes what we store and why. The Service is operated by an independent developer, who is the data controller; for any privacy request, contact contact@skilltotal.ai.

What we store

• Scan requests and reports: the source you submit (git URL or package name), the analyzed revision, and the resulting report. Reports are cached and may be served to other users scanning the same component.
• Email address— only if you voluntarily provide it in the "Get notified" waitlist or the Feedback form, used solely to contact you about what you signed up for.
• Feedback: messages and per-finding verdicts you submit, used to improve the service and its open-source detection rules.

Analytics & error monitoring

• Privacy-friendly analytics: we use Vercel Web Analytics and Speed Insights to count page views and measure load performance. It is cookieless, aggregate, and does not track you across other sites or build a profile of you.
• Error monitoring: when a page or the API errors, technical diagnostics (error type, stack trace, browser/URL) may be sent to Sentry to help us fix bugs. We disable personal-data collection in Sentry; the code you submit is not included.

What we do NOT do

• No user accounts, no profiles.
• No advertising, no sale of data, no cross-site or ad trackers.
• No tracking cookies — your theme preference is kept in your browser's localStorage and never sent to us.
• We never execute the code you submit; analysis is static.

Technical data & retention

Our infrastructure providers process standard technical logs (IP addresses, request metadata) to operate the service and enforce rate limits. Hosting: Vercel (frontend + analytics), Fly.io (API, London), Neon (database, EU region), and Sentry (error diagnostics). Operational logs and error events are retained only as long as needed to run and debug the service (on the order of weeks). Scan reports are cached to serve repeat lookups; emails and feedback are kept until you ask us to remove them.

Your rights & removal requests

You can request access to, or deletion of, any personal data we hold about you (typically just an email you submitted). Email contact@skilltotal.ai (or use the Feedback button in the footer) with the address you want removed, and we will delete it from our database.

Changes

We may update this policy; the "Last updated" date reflects the current version.