IndiePort

Privacy Policy

Last updated: 12 November 2026

IndiePort is operated by Nexterday Digital Technology CO., LTD. It is a directory of AI tools, MCP servers and agent skills. This page says what information the site handles, why, and what you can do about it.

What we collect when you sign in

  • Signing in is done with Google. From Google we receive your name, your email address and your profile picture, and nothing else: we do not ask for access to your mail, files, contacts or calendar.
  • We use them to create your account, show your name and picture when you are signed in, decide whether you are an administrator, and contact you about your account or a purchase.
  • A session cookie keeps you signed in for up to 30 days. It cannot be read by scripts, and only a hash of it is stored on our side.

What we collect when you browse

  • You can browse without an account. We do not use advertising trackers.
  • When you click through to a listing we count the visit. To count each visitor once a day we compute a salted hash from your IP address, the day and the listing; the IP address itself is not stored, and the hashes are deleted after a few days.
  • Our hosting provider keeps ordinary request logs (such as IP address and browser type) for security and reliability.

What makers give us

  • If you add a product, the details you enter are published on the site.
  • If you connect Stripe to verify revenue, you give us a restricted, read-only key. It is stored encrypted, used only to read revenue totals, never shown again, and deleted when you disconnect.
  • If you buy a promotion, payment is handled by Lemon Squeezy, who act as the seller of record. We receive the order details and your email, never your card number.

Who else is involved

  • Cloudflare hosts the site and its database. Google provides sign-in. Lemon Squeezy processes payments. Stripe is contacted only for makers who connect it. GitHub is the source of public repository data.
  • We do not sell personal information, and we do not share it with anyone else except where the law requires it.
  • Listing pages and the Trending page list public Hacker News posts and comments that mention a project: only the title, author name, score and date, linking back to the discussion, never the content. To have one removed, write to us.

Information about repositories

  • Listings for MCP servers and skills are built from public GitHub data: names, descriptions, star counts, READMEs and owner names. If you maintain a repository and want it removed or corrected, tell us through the contact page.

Your choices

  • You can ask for a copy of the information tied to your account, or ask us to delete your account and that information, through the contact page.
  • You can stop Google sign-in at any time from your Google account's list of connected apps.

Changes

  • If this policy changes in a way that matters, the date at the top changes and the new version is published here.

Questions about this page? Write to hello@indieport.co or Contact