Privacy Policy

Coadite is the data controller for Godot MCP Studio. This policy explains exactly

what we collect, what we don't, why, how long we keep it, and the rights you have

over your data (including under the EU and UK GDPR).

What we collect

• Account data: your email, a display name, and authentication details

(a hashed password and session tokens), to run your account.

• Purchase & license data: your plan, license status, and activated devices.

For each activation we store an opaque identifier derived on your computer,

the device name you enter, operating system, architecture, app version,

activation and last-check dates, country/region, and a masked network prefix.

We do not store the machine identifier used to derive that opaque ID, a MAC

address, a full IP address, or precise location. Polar acts as the Merchant

of Record and authorized reseller for purchases. Polar processes payment,

billing, tax, invoice, and receipt information. We receive the customer and

order details needed to provision and support your license, but never see or

store your full card details.

• Basic operational logs: standard server request logs from our hosting

provider, used to keep the service running and secure.

• Privacy-preserving website analytics: anonymous page views and successful

installer-download events, including aggregate country, browser, device type,

and operating system. Vercel Web Analytics does not use analytics cookies or

tie these events to an identifiable visitor or IP address.

• Advertising conversion measurement: Google Ads and X Ads receive limited

page and completed-purchase signals so we can measure whether an advertisement

led to a sale. Purchase signals include the order value, currency, and an

opaque checkout identifier used to prevent duplicate counting. Advertising

storage, advertising user data, personalization, and analytics storage are

denied by default. The X pixel loads only after you allow measurement, and we

disable personalized Google ad signals.

• Service request records: when the desktop app checks or downloads rules

and skills, we record the edition, app version, operating system,

architecture, request time, and approximate country/region. Pro requests are

linked to the account and opaque activated-device identifier used to verify

access. We do not store an IP address, network prefix, or selected AI agent in

these records.

• Support messages: if you start a chat with us, we and our chat provider

Fernand process the messages you send so we can answer you. When you are

signed in with a verified email, we securely identify your name and email to

Fernand so the conversation can be linked to your account. Fernand may match

that email with your Polar customer and purchase information for support.

Why we collect it (legal basis)

Under the GDPR we rely on these legal bases:

• Performance of a contract: account data, license, and device activations

are needed to give you the product you bought and to keep your license working.

• Legal obligation: we keep the minimum purchase and tax records the law

requires.

• Legitimate interests: basic operational logs, coarse activation metadata,

and service request records are used to keep the service secure and reliable,

prevent fraud and license abuse, and enforce the three-device limit. We keep

this data minimal and masked.

• Consent: where we ever ask for it (for example a non-essential communication),

you can withdraw it at any time.

What we do NOT collect

• We do not collect desktop-product analytics or track which MCP tools,

rules, skills, projects, or AI agents you use. Website analytics is limited

to anonymous page views and successful installer downloads. The service

request records described above are limited to checking and delivering the

current rules and skills bundle.

• We do not collect MAC addresses, raw hardware serial numbers, full IP

addresses, or GPS location.

• We do not read, upload, or store your Godot projects, scenes, scripts, or

any file on your machine.

• We do not sell, rent, or share your data with advertisers.

What stays on your machine

Godot MCP Studio is local-first. Your project files and everything the AI does to

them are processed entirely on your own computer by the local MCP server. That

content never reaches our servers. The locally stored, signed activation token

includes your account display name and email so the desktop app can show who the

license belongs to.

Cookies and local storage

We keep cookies to the minimum needed to run the site.

• Strictly necessary cookies: the website sets a secure session cookie when you

sign in, so you stay logged in and your account is protected. These are essential

and cannot be turned off without breaking sign-in.

• Optional advertising measurement: Google Ads runs with advertising

storage, advertising user data, personalization, and analytics storage denied

until you allow measurement. The X pixel does not load before consent. You can

revisit your choice through the Cookie settings link in the website footer.

• Live chat: our support chat is provided by Fernand. When the chat loads it sets

its own functional cookies and local storage so a conversation can start and

continue. These run the chat only; they are not advertising or cross-site tracking.

• Checkout: when you buy, Polar, as Merchant of Record, may set its own cookies

on its checkout and customer-portal pages under its own privacy policy.

• On your computer: the desktop app stores a signed activation token and your

settings locally so it works offline. That stays on your machine and is not a

website cookie.

International data transfers

Our hosting, email, and payment providers may process data on servers outside your

country, including outside the EU. Where that happens we rely on the providers'

standard contractual clauses and equivalent safeguards to protect your data.

Data retention

We keep account, license, and activation records for as long as your account

exists, so your license keeps working. If you delete your account, we remove your

personal data within 30 days, except records we must keep for legal, tax, or

fraud-prevention reasons. Operational logs are rotated on a short schedule.

Third parties

We use Polar as the Merchant of Record and authorized reseller for purchases,

Fernand for our live chat and support widget, Vercel for hosting and anonymous

website analytics, Google and X for consent-controlled advertising conversion

measurement, and standard infrastructure providers for email. They process data

to provide those services under their respective terms and privacy policies.

Your privacy rights

Wherever you live, you can ask us to show you the personal data we hold and to

correct or delete it. If you are in the EU, the UK, or a region with similar laws,

you also have the right to:

• access a copy of your data;
• rectify data that is wrong or incomplete;
• erase your data ("right to be forgotten"), subject to records we must keep by

law;

• restrict or object to certain processing;
• portability: receive your data in a portable format;
• withdraw consent at any time where processing was based on consent.

To exercise any of these, contact Coadite and we will respond within the timeframe

the law requires. You also have the right to complain to your local data protection

supervisory authority, though we hope you will contact us first so we can help.

Changes

We may update this policy at any time. The "Last updated" date above always

reflects the current version; material changes will be noted on this page.

Contact

For privacy questions, to exercise your rights, or to request deletion of your

data, contact Coadite at the address on our website.