Privacy Policy
Heropedia is a public library of AI expert personas at heropedia.org, with a public MCP server at https://www.heropedia.org/mcp. We collect as little as possible. We do not sell data, show ads, or use third-party analytics or tracking scripts.
What we collect
| Data | When | Why | How long |
|---|---|---|---|
| Your IP address, the hero page you viewed, and the date | When you view a hero page | Count each page view once per IP address per day; the counts appear on the site and on /stats | Kept for the life of the site |
| Your IP address, the hero you copied or opened on GitHub, and the time | When you copy or download a persona | Download counts | Kept for the life of the site |
| Your GitHub user ID, username and avatar URL | Only if you sign in with GitHub | Keep you signed in; show who submitted a hero | Stored in a signed cookie that expires after 7 days. We do not keep a separate account database |
| Your GitHub user ID and username, with the hero you starred | When you star a hero | Count stars and prevent double stars | Until you remove the star |
| Your GitHub username and user ID, and a log of the changes you make in the admin console | Only if you are a Heropedia admin | Control who can open the admin console; keep a record of admin changes | Until you are removed as an admin; the change log is kept |
| Hero files you submit or edit, under your GitHub username | When you publish | They are the content of the site | Public in the content repository under the MIT license |
| Your IP address | On requests that are rate-limited (MCP calls, stars, submissions) | Prevent abuse | Deleted once the rate-limit window passes, typically minutes |
| Daily totals with no personal data: MCP tool calls, the name an AI client reports, skill installs, referring websites | On MCP calls, install links and visits from other sites | Public growth statistics | Kept as daily totals |
The MCP server and the office-hour skill
When an AI agent (Claude, ChatGPT, Codex, Gemini or others) calls the Heropedia MCP server, it sends a hero or role search, or the ID of a hero. We do not store those queries or anything from your conversation; we count calls per day. Your IP address is used only for rate limiting as described above.
The heropedia-office-hour skill runs inside your own AI agent. Your answers, the diagnosis and your notes stay on your machine; the skill never sends them to Heropedia or anyone else.
Who else processes data
- Cloudflare hosts the site and the MCP server and processes requests to deliver them. Cloudflare Turnstile checks submissions for bots.
- GitHub handles sign-in (read-only access to your public profile) and stores the public hero content.
We do not share or sell data to anyone else.
Cookies
Only if you sign in: hp_user (keeps you signed in, 7 days) and hp_oauth_state (a short-lived security check during GitHub sign-in). Viewing and using heroes sets no cookies. No advertising or cross-site cookies.
Your choices
- You can use the site, the MCP server and the skill without signing in.
- Signing out removes the sign-in cookie.
- To ask about or remove records tied to your IP address, open an issue in the content repository with the address and dates.
- Remove a star by clicking it again. To have content you submitted removed, open an issue in the content repository.
Children
Heropedia is not directed at children under 13, and we do not knowingly collect their information.
Changes
We will update this page when our practices change, and change the date at the top.
Contact
Questions or requests: open an issue at github.com/SiliconRoshiBill/heropedia/issues.