Skip to content

Privacy policy

Effective date: 21 October 2026. This policy describes what MCP Atlas actually does today, based on the current implementation. Fields that have not been established are marked rather than invented.

Who is responsible

The data controller is AIWORKPAY, SAS (Société par actions simplifiée), RCS Paris — SIREN 941 861 775, registered office 60 Rue François Ier, 75008 Paris, France — https://aiworkpay.fr — contact@aiworkpay.fr. Data Protection Officer, if appointed: INCOMPLETE · to be completed before public launch

What we collect

  • Project submissions. If you use the submission form, we store the project name, repository URL, optional website URL, description and optional contact email you provide, in order to review the submission.
  • Administrator accounts. The admin area uses email/password authentication. Account data (email, authentication identifiers) is stored by our managed cloud backend. Public visitors do not need an account.
  • Technical logs. The hosting platform and edge runtime keep operational logs (which may include IP addresses and request metadata) for security and debugging. Our public API applies an in-memory, per-IP rate limit that is not persisted.

What we do not do

  • No analytics or audience-measurement tools are installed.
  • No advertising, tracking or profiling cookies. No third-party ad networks.
  • No sale or sharing of personal data with data brokers.

Local browser storage

The comparison feature stores your selected servers in your browser's local storage (key mcp-atlas-compare). This data never leaves your device and can be cleared at any time via your browser settings. Admin sign-in also stores a session token in local storage on the admin's own browser.

Service providers (processors)

  • Managed application hosting and edge delivery (serves the site, keeps operational logs).
  • Managed cloud backend (database and authentication for submissions and admin accounts).
  • Google Fonts (fonts are loaded from Google's servers; your browser connects to Google to fetch them).

Precise legal names and addresses of these providers: INCOMPLETE · to be completed before public launch

Hosting location and international transfers

The website is hosted in the United States (as stated by the publisher). The publisher, AIWORKPAY, is a French company: hosting location does not remove French or EU obligations, and the GDPR still applies to the processing described above. Where personal data is transferred outside the EU/EEA, the specific transfer safeguards relied upon (for example adequacy decisions or standard contractual clauses): INCOMPLETE · pending verification of hosting provider and transfer mechanism

Legal bases, retention and your rights

Submissions are processed on the basis of your explicit request (and our legitimate interest in maintaining the directory); logs on the basis of legitimate interest in security and operation. Retention periods for submissions and logs: INCOMPLETE · to be completed before public launch

Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your personal data, and to lodge a complaint with your supervisory authority (in France: the CNIL). To exercise any right, email contact@aiworkpay.fr. Nothing on this site waives these mandatory rights.

Changes

This policy may be updated as the site evolves; the effective date above shows the current version.