Privacy policy

Skill Crossroads stores as little about you as it can get away with: an account identity, score records, and a billing status. This page lists all of it. For exactly how scanned code is handled, see How Skill Crossroads handles your code — this page covers the person, that page covers the code. Effective 2026-07-18.

What we collect

• Account (optional). Signing in uses GitHub OAuth: we receive your GitHub login, numeric id, and avatar URL. We never see your GitHub password. Your OAuth token lives in an HttpOnly cookie in your browser and is never written to our database.
• Scan history. Each scan stores a score record (repo/path, grade, per-category scores, rubric version, timestamp). Anonymous scans stay anonymous; scans made while signed in carry your GitHub login so /account can show you your own history.
• Billing (Pro). Payments are processed by Stripe. We never see or store card numbers — we store your Stripe customer and subscription identifiers and whether the Pro entitlement is active. Manage or cancel any time from /account via the Stripe Customer Portal.
• Cookies. A session cookie when you sign in, and a short-lived first-touch cookie (sc_ref, 30 minutes) recording which link brought you here so we can tell which launch channel worked. No third-party advertising or tracking cookies.
• Server logs. Standard request logs from our hosting provider (Vercel), used for operations and abuse prevention.

Who else touches data

• GitHub — OAuth sign-in and fetching repos you ask us to scan. Stripe — payments. Vercel — hosting and logs. Neon (Postgres) — where score records live. Anthropic — on Pro managed-LLM scans, the artifact text being graded is sent to the Anthropic API to produce a verdict (details on the code-handling page).
• We do not sell or share your data for advertising. There is no ad tech here.

Removal and contact

• To remove your account data (login-attributed scan history, entitlement record), email sgharlow@gmail.com from the address on your account or open an issue at github.com/sgharlow/skillcrossroads. Anonymous score records contain nothing that identifies you.
• If this page and the code ever disagree, that is a bug — the storage layer is open source; please open an issue.