Privacy Policy
Last updated: 2026
This Privacy Policy explains how the MCP Rating website and API (the "Service"), operated by SoshiteAI ("we", "us"), handles information. We have designed the Service to collect as little personal data as possible.
We act as the data controller for any personal data processed via the Service. This policy is written to align with the UK GDPR / EU GDPR principles. (Confirm jurisdiction-specific obligations with an adviser before relying on this as a compliance document.)
1. What we collect
We do not require accounts, and we do not sell data or run advertising.
| Data | Why | Basis |
|---|---|---|
| Basic, privacy-respecting analytics (e.g. page views, referrer, country, device type — aggregated, no cross-site tracking) | To understand usage and improve the Service | Legitimate interest |
| Server logs (IP address, timestamp, requested URL, user agent) | Security, abuse prevention, and operating the Service; retained for a short period | Legitimate interest |
| Newsletter email (only if you choose to subscribe) | To send updates you asked for | Consent |
| Contact correspondence (if you email us) | To respond to your message | Legitimate interest |
We use a privacy-first analytics provider configured not to use cookies for cross-site tracking and not to collect data that, on its own, identifies you.
2. What we do NOT do
- We do not create user profiles for advertising.
- We do not sell or rent personal data.
- We do not use intrusive third-party trackers.
- We do not knowingly collect data from children.
3. Public MCP server data
Information about MCP servers shown on the Service is collected from public sources (the official MCP registry, npm, GitHub, public lists). This is public, non-personal project metadata (names, descriptions, statistics) plus our own derived scores. Where an author's public username appears, it is shown for attribution and links back to the public source. See Listing removal below.
4. Cookies
The Service aims to operate with minimal or no non-essential cookies. Any strictly necessary cookies (e.g. for security or load balancing) are used only to operate the Service. If we introduce optional cookies in future, we will ask for consent first.
5. Sharing
We share data only with infrastructure providers needed to run the Service (e.g. hosting, CDN, analytics, email delivery), acting as our processors under appropriate terms. We may disclose data if required by law.
6. Retention
We keep server logs for a short period (typically up to ~30 days) for security and operations, then delete or anonymize them. Newsletter emails are kept until you unsubscribe.
7. Your rights
Subject to applicable law, you may have the right to access, correct, delete, or restrict processing of your personal data, to object to processing, and to data portability. To exercise any right, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority (in the UK, the ICO; in Poland, the UODO).
8. Listing removal / takedown
If you are an MCP server author and want your listing corrected or removed, or if public information shown about you should be amended, contact [email protected] and we will review and respond in good faith.
9. International transfers
Where data is processed outside your country (e.g. by a hosting or analytics provider), we rely on appropriate safeguards as required by applicable law.
10. Changes
We may update this policy; material changes will be reflected by updating the "Last updated" date above.
11. Contact
For any privacy question or request: [email protected]