What this site keeps about you, and what it does not.

Reading the index

There is exactly one third-party script on this site, and it is not ours: Google Analytics, which counts page views. It is not used for advertising here, and nothing else on the site reports on a reader.

Like any web server, the one behind this site writes a request log: the path requested, the time, the address the request came from, and the user agent your browser sent. It exists to operate and secure the service — to see what is failing and to recognise abuse — and it is not combined with anything else or used to build a profile. The log is held on the server; it is not sent anywhere else.

Analytics

The counter is Google Analytics, and it reports what a page view normally carries: the page you opened, the page you arrived from, the title of the page, what your browser says about itself, and an approximate location — a city, not an address — worked out from the address the request came from. It is sent to Google, which keeps it under its own privacy terms. The counter is not joined to anything you submit: a suggestion you send and a page you read are not connected.

It sets two cookies in your browser, both belonging to this site's own domain rather than Google's: _ga, and _ga_M6G7LKVRC8. They exist so that one browser can be told from another, and they are the only cookies this site sets.

Nothing on the page changes because of it. The counter is a counter — no feature here reads it, and no page behaves differently for a reader who blocks it.

Turning the counter off

Every page here works without the analytics script, so blocking it costs you nothing. A browser or extension that blocks third-party scripts stops it. Blocking third-party cookies may not: the two cookies are set on this site's domain, not on Google's.

Server records

Records in the index describe software, not people, and are built from the public MCP Registry. If you maintain a server and want its record removed, ask. This site has no interest in publishing a record its maintainer does not want published. Contact

Submissions

Submission is the one place this site asks you for something, and it is optional. What is stored:

The registryName or repositoryUrl of the server you are suggesting. An optional contactEmail, used only if a question about this submission needs answering. An optional note, up to 1200 characters. And a requesterHash — a one-way hash of the address your request came from, together with the time of the request.

Your address itself is not stored. The hash exists for one purpose: counting how many submissions have arrived from one connection recently, so the form can be rate limited. It is salted with a secret, so the same address produces a different value here than it would anywhere else, and it cannot be turned back into an address.

The form also carries a hidden field named companyWebsite, which is a spam trap. It is invisible to a person and invisible to a screen reader, and a submission that fills it in is discarded without being stored. Nothing about it is kept.

Submissions are reviewed before anything appears in the index, and a submission is never published as-is.

Email

If you write to [email protected], your message and address are kept so the message can be answered. They are not added to a list and are not used to contact you about anything else.

Who else is involved

The site is served through Cloudflare, which sees requests on their way here and handles them under its own privacy terms. The source code is hosted by GitHub, which sees anything you do there under its own terms. Google is a third party here on purpose, through the analytics tag above. Neither of the others hands this site analytics or advertising data.

Requests about your information

To ask what is held, to correct it, or to have it deleted, contact. A submission can be withdrawn and a record can be removed. Contact