Privacy Policy

Last updated: July 27, 2026

1. Who we are

MCP-MD-Sharing is a platform for sharing and versioning Markdown documentation, accessible online and from AI coding agents (Claude Code, Cursor, Codex) via the Model Context Protocol, at mcp-md-sharing.tkissdev.com. The service is operated by TKissDev (contact: contact@tkissdev.com).

2. Data we collect

We only collect data required to operate the service:

  • Email address — used for authentication.
  • Google data — if you sign in via Google: the identifier, email address, and avatar provided by that service.
  • Content you add — organizations, projects, Markdown documents, and their version history.
  • Personal API keys — stored as a hash (never in plain text), used to connect your AI agents.

We do not collect: location, payment data, advertising data, or behavioral tracking.

3. Purpose of processing

  • Authentication and secure access to your account
  • Storage and display of your organizations, projects, and documents
  • Semantic search across your documents (see section 5 for the OpenAI data flow)
  • Secure connection of your AI agents via a personal API key

4. Legal basis (GDPR)

Processing is based on your consent (Art. 6.1.a GDPR), given when creating your account, and on the performance of the service contract (Art. 6.1.b GDPR).

5. Storage and hosting

Data is stored in Supabase (PostgreSQL database). The web application is hosted on Vercel. For semantic search, the content of your documents is sent to OpenAI to generate search embeddings — this content is only used for that request, in line with OpenAI's API policy. These providers are bound by data protection agreements (DPA, standard contractual clauses).

6. Retention period

Your data is retained for as long as your account is active. To request deletion of your account, contact us — your data will be erased within 30 days.

7. Data sharing

We do not sell or share your data with third parties for commercial purposes. Only essential technical providers (Supabase, Vercel, OpenAI) process your data, strictly within the scope of providing the service.

8. Your rights (GDPR)

Under GDPR, you have the following rights:

  • Access — obtain a copy of your data
  • Rectification — correct inaccurate data
  • Erasure — delete your account and all your data
  • Portability — export your data in a readable format
  • Objection — object to processing

To exercise these rights, contact us at: contact@tkissdev.com. Response time: maximum 30 days.

You may also file a complaint with the French data protection authority (CNIL): cnil.fr/fr/plaintes.

9. Cookies and trackers

MCP-MD-Sharing uses a session cookie required for you to stay signed in. Data is also stored locally in your browser (localStorage) only to remember your interface preferences (language, sidebar state). No advertising or tracking cookies.

10. Changes

This policy may be updated. In case of a significant change, you will be notified by email or via an in-app notification.

11. Contact

For any questions about this policy: contact@tkissdev.com