Legal

Privacy Policy

Effective May 8, 2026

1. Who We Are

VCSkills is operated by Overdrive ("we", "us", "our"). This policy explains what personal data we collect, why we collect it, how long we keep it, and your rights under the General Data Protection Regulation (GDPR) and applicable US privacy laws.

Data controller: Overdrive · legal@vcskills.com

2. Data We Collect

Data typePurposeRetention

Email address

Consent (Art. 6(1)(a) GDPR)

Product communications, security notifications, skill review follow-up

3 years from collection, or until you withdraw consent

Skill submission (GitHub URL + email)

Consent (Art. 6(1)(a) GDPR)

Reviewing and listing community-submitted skills

3 years, or until the submission is resolved

Install click events (skill slug, timestamp)

Legitimate interests (Art. 6(1)(f) GDPR) — anonymous usage analytics

Powering the install-count leaderboard

2 years from the event date

Usage data (pages visited, browser type, IP address)

Legitimate interests (Art. 6(1)(f) GDPR)

Service security, abuse prevention, and aggregate analytics

90 days for raw logs; aggregate analytics retained indefinitely

3. How We Use Your Data

To operate and improve the Service, including the install-count leaderboard.
To send you product updates and new skill announcements if you have subscribed (email signups).
To follow up on skill submissions you have made.
To notify you of important security information related to skills you have installed.
To comply with our legal obligations and enforce our Terms of Service.

4. Data Sharing

We do not sell your personal data. We share data only with:

Supabase (database infrastructure) — data is stored in Supabase's EU-region servers and governed by Supabase's Data Processing Agreement.
Vercel (hosting and serverless functions) — Vercel processes request metadata as part of serving the application.
Law enforcement or regulatory authorities — only when required by law or to protect our legal rights.

5. Data Retention

We retain personal data only as long as necessary for the purposes described in Section 2. Retention periods are set out in the table above. When data reaches the end of its retention period, it is deleted or anonymised within 30 days.

You may request early deletion at any time by contacting us (see Section 8). We will process deletion requests within 30 days.

6. Cookies and Tracking

VCSkills uses localStorage and sessionStorage for theme preference and session state only. We do not use third-party advertising cookies. We do not use Google Analytics or similar cross-site tracking.

7. International Transfers

If you are located in the European Economic Area (EEA), your data may be transferred to and processed in the United States. Such transfers are made under Standard Contractual Clauses (SCCs) adopted by the European Commission, which provide appropriate safeguards for your data.

8. Your Rights

Under GDPR, if you are in the EEA, you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure — ask us to delete your data ("right to be forgotten").
Restriction — ask us to restrict processing while a dispute is resolved.
Data portability — receive your data in a structured, machine-readable format.
Object — object to processing based on legitimate interests.
Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email legal@vcskills.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify subscribers by email. Continued use of the Service after the updated policy takes effect constitutes your acceptance.

Questions? Email legal@vcskills.com or review our Terms of Service.