Back to catalog
Privacy & KVKK Disclosure

Privacy Policy

Last updated: June 2026. This page explains what data Universal Skill Bridge collects, how it is used, and your rights under KVKK and GDPR.

1. What we collect

Universal Skill Bridge operates as a public skill catalog. The data we process is:

  • No personal data is required to browse the catalog or download skills.
  • Anonymous installation records (target, pack slug, version, timestamp) are stored only if you click “Record Installation” in the interactive console. These contain no personal data.
  • Optional telemetry (opt-in via USB_TELEMETRY=on) sends target + pack + version + skill count to a public endpoint. No IP, no user agent, no PII.

2. Cookies & local storage

We do not set tracking cookies. The catalog uses standard browser storage only for UI preferences (search query, category filter). Clear cookies → preferences reset.

3. Third-party services

  • Cloudflare: DNS, CDN, SSL termination. Cloudflare may log request metadata (IP, user agent, path) for DDoS protection. See Cloudflare Privacy Policy.
  • PostgreSQL: data is stored on PeepSick Labs infrastructure (self-hosted, no third-party DB).
  • We do not sell, rent, or share any data with advertising networks.

4. Your rights (KVKK / GDPR)

You have the right to:

  • Access any personal data we hold about you (we hold none by default).
  • Request deletion of installation records associated with you.
  • Object to processing or withdraw consent at any time.
  • Lodge a complaint with your local data protection authority.

5. Security

  • HTTPS-only with HSTS preload-ready headers.
  • Strict Content-Security-Policy, X-Frame-Options DENY, no cross-origin framing.
  • Optional SHA-256 verification of install scripts.
  • Self-hosted PostgreSQL on PeepSick Labs infrastructure.

6. Data Controller

PeepSick LABS — Veri Sorumlusu