Scope
This Privacy Policy explains how the Skills Manager project handles information when you use the desktop application, this website, and related online features. It does not govern third-party tools, skill packages, websites, or services that you choose to use with Skills Manager.
Data kept on your device
Core skill organization, tool detection, linking, editing, and static security scanning are designed to run locally. Skills Manager does not upload your Skills merely because you add or manage them in the app.
Depending on the features you use, the app may store the following information locally:
- Skills, file contents, selected directories, tool paths, project bindings, and synchronization settings.
- App preferences, tags, favorites, marketplace caches, translation caches, scan results, and local usage history.
- Credentials that you provide, such as a GitHub token, an LLM API key, or account session tokens. These are stored in the app configuration on your device and should be protected like other credentials.
Data processed for optional online features
Skills Manager connects to external services only when a network-backed feature needs them. The information processed depends on the feature:
- Marketplace and updates: search terms, source identifiers, repository metadata, requested Skill files, app version information, and an optional GitHub token may be sent to GitHub, ClawHub, or another marketplace source you configure.
- Account sign-in: when you choose GitHub or Google sign-in, the authentication provider and the Skills Manager authentication service may process your provider identifier, username, avatar, email if returned by the provider, and authentication tokens.
- Feedback: when you submit feedback in the app, your chosen contact method, contact value, message, language, and submission source are sent to the project through a Feishu/Lark webhook.
- Translation and LLM review: Skill text, relevant scan findings, and prompts required for the request are sent to the LLM endpoint you configure. Your API key is sent directly to that provider for authentication.
- Usage telemetry: anonymous product usage events are sent only after you explicitly allow collection. You can change this choice in Settings and clear associated local telemetry data.
Website and request data
This website does not currently set advertising cookies, create user accounts, or load third-party advertising trackers. Fonts and product images are served with the site.
Our hosting and network providers may automatically process standard request information such as IP address, user agent, requested URL, referrer, timestamp, and security signals to deliver the site, prevent abuse, diagnose failures, and maintain service reliability.
How information is used
- Provide the feature or request you initiated.
- Authenticate accounts and maintain secure sessions.
- Respond to feedback, support requests, and security reports.
- Maintain reliability, prevent abuse, and improve Skills Manager when you have allowed telemetry.
- Comply with applicable law and protect the rights and safety of users, the project, and others.
Retention and your controls
Local data remains on your device until you remove it, clear the related cache or setting, or uninstall the app. Signing out removes the local account session. Credentials can be removed from Settings or from the local configuration file.
Feedback and account records may be retained for as long as reasonably needed to operate the feature, respond to you, maintain security, and meet legal obligations. Infrastructure logs follow the retention practices of the relevant hosting or network provider.
You may deny or withdraw telemetry consent in Settings. To request access, correction, or deletion of information held by the project, contact us through the link below. Do not post secrets or sensitive personal information in a public issue.
Security
We use reasonable technical and organizational measures appropriate to this open-source project. No storage or transmission method is completely secure. You are responsible for protecting your device, backups, account credentials, API keys, and the permissions granted to third-party tools and Skills.
Children
Skills Manager is a developer tool and is not directed to children under 13 or the minimum age required by local law. If you believe a child has provided personal information through an online feature, contact us so the report can be reviewed.
Changes and contact
We may update this policy as the product, service providers, or legal requirements change. The date at the top identifies the latest version. Material changes will be presented through the website, the app, or project release notes when practical.
For privacy questions or requests, open an issue in the Skills Manager GitHub repository. Use a private contact method referenced by the maintainers when your request contains sensitive information.