Privacy policy

SkillsPicker matches software projects to public agent skills. Fieldnote Labs in Missouri, USA, runs it.

What we collect

No accounts. No ads or trackers. No cookies from us. We do not sell or share personal data.

Analytics

We run our own counter, with no third-party analytics script. When a page loads, your browser sends the page path and the host name of the site that linked you. If the link has a campaign tag (utm_source and utm_campaign), your browser sends those two tags. When you run a scan, see results, click to check out or open a paid list, your browser sends that action name. Our server counts scans, API calls and MCP calls per day by input type and client type, such as browser or curl. It keeps that short label, not the full user agent. We store daily totals. We do not store your IP address, a cookie or an ID. To drop repeat actions, a one-way hash of your IP address, the action and the date sits in the Cloudflare cache for 10 minutes.

Repo scans

When you paste a GitHub repo URL, our server asks the public GitHub API for the repo's file list and reads a few manifest files (such as package.json, pyproject.toml, go.mod, Dockerfile and README.md) from GitHub. We turn them into tags and discard the files. We keep the repo's file list (file paths, no contents) for 24 hours so a repeat scan does not ask GitHub again.

Text scans

A project description goes to our server, which picks tags from it and discards the text.

Local CLI and MCP tool

The local CLI reads your project on your machine and sends the tag names and nothing else, for example "nextjs" or "testing". It sends no code, file names or file contents. The MCP tool receives the tags, description or repo URL your agent passes and handles them like the scans above.

Scan log

To check and improve picks, we log each scan without personal data: the tags we found, the input type (repo, text, tags), the ranking method, the time to the minute, and the IDs of the top 5 picks. For a repo scan the log holds the repo name, since that repo is public on GitHub. We do not log the text of a description, your IP address or your browser. Logs expire after 30 days.

Scan links

A scan code encodes the tags of a scan, nothing more. Anyone with the link sees the same free result.

Payments

Polar (polar.sh) is the merchant of record and runs checkout. It collects your name, email, billing address and card details under its own privacy policy, and may set its own cookies in checkout. We do not see your card number. Polar tells us when an order is paid or refunded. We store the checkout id, order id, customer id and the scan code for that order in Cloudflare storage so your list opens after payment. When you open a list with a license key, we check the key with Polar and store a one-way hash of the key with the scan it unlocked.

To stop abuse, our server counts scans per IP address in the Cloudflare cache for 10 minutes, under a one-way hash. It is not stored anywhere else.

Hosting

Cloudflare hosts this site and processes your IP address, browser type and the pages you request to serve and protect it. See the Cloudflare privacy policy.

Children

This site is for developers. It is not meant for children under 13.

Contact

Questions or deletion requests: [email protected].

Last updated 2026-10-18.