Skip to content

Privacy Policy

Last updated

The short version

You can browse Onei without an account, and an anonymous visit sets no cookies. If you sign in, we keep your email address and the few things you choose to add. We do not sell personal data, we do not run advertising trackers, and the only cookies we set are the two that keep you signed in.

If you just browse

  • Onei runs on Cloudflare. Like any web host, Cloudflare processes each request — including your IP address, browser user agent and the page requested — to deliver the page and protect the site from abuse. Our application logs record requests and errors for debugging.
  • Opening a skill or MCP server page, or copying its content or install configuration, adds one to a public view or copy counter for that entry. Nothing that identifies you is stored with the count.
  • We may measure aggregate traffic with Cloudflare Web Analytics, which does not use cookies or local storage and does not build a profile of you across sites.
  • Your browser's local storage keeps your light/dark theme choice and the recent searches in the search palette. That data stays on your device; we never receive it.
  • Many product icons are loaded directly from the product's own site or from services such as GitHub and Google, so those hosts see the request for the icon (and your IP address) as they would for any image on the web.

If you sign in

  • Login codes. We sign you in with a six-digit code sent to your email address — there is no password. The code is stored in Cloudflare Workers KV and expires after 10 minutes; a marker that limits code requests to one a minute per address expires after 60 seconds. The email is delivered by Resend, which processes your address to send it.
  • Your account. Your first sign-in creates an account holding your email address, a username and display name (generated, and editable in settings), an optional website, and timestamps. These live in our database (Cloudflare D1). Your email address is never shown publicly.
  • Cookies. Signing in sets two strictly necessary, HTTP-only cookies: session, a signed token that expires after 7 days, and refresh_token, a random token that renews the session, is replaced each time it is used, and expires after at most 12 months. Each signed-in device has a session record in our database. Signing out deletes it; settings can also sign out every other device.
  • What you add. Bookmarks are private to you; the total number of bookmarks an app has is public. Reviews are public and shown with your display name. Apps you submit are public once approved, and the images you upload are stored in Cloudflare R2 and served from cdn.onei.ai.

Who processes data for us

  • Cloudflare — hosting, content delivery, database, key-value and file storage, logs, and (if enabled) web analytics.
  • Resend — delivering login emails.

We use no other third-party service that receives your personal data, and we do not sell or rent it to anyone. These providers may process data outside your country.

How long we keep it

  • Login codes: 10 minutes. Sessions: until they expire or you sign out.
  • Your account, bookmarks and reviews: until you ask us to delete them. Deleting your account deletes your sessions, bookmarks and reviews with it; apps you submitted stay listed, no longer linked to you.
  • Logs: for the retention period of our hosting provider's logging service.

Your choices and rights

You can change your display name, username and website in settings. To get a copy of your data, correct it, or delete your account, email contact@onei.ai from the address you sign in with. Depending on where you live, you may have further rights under data-protection law, including the right to complain to your local data-protection authority.

Onei is not directed at children under 16, and we do not knowingly collect their data.

How our content may be used

Our robots.txt carries a Content Signals declaration: search engines may index the site (search=yes), AI systems may use our pages to answer questions with attribution (ai-input=yes), and our content may not be used to train AI models (ai-train=no).

Changes

When what the site does with data changes, this page changes with it and the date at the top moves. Questions about this policy go to contact@onei.ai.