Privacy
What we keep, and why
Updated 2026-11-01
The short version
- The website sets no cookies and runs no analytics or tracking.
- If you ask for a key, we keep what you send in the form to decide and to reach you.
- Keys are stored only as a hash. Nobody, us included, can read your key back.
- For the hosted MCP server we count tool calls by a hash of your key, for 30 days. We never keep what you asked.
- The CLI and the local MCP server run on your computer and send us nothing.
The website
The site sets no cookies and loads no analytics, advertising or tracking scripts. If you pick light or dark with the theme switch, that choice stays in your browser’s local storage and never reaches us. The service that serves the site does not store IP addresses. Our host and DNS provider process each request to deliver it.
When you ask for a key
The form asks for your full name, work email and organization, and, if you add them, your role, a LinkedIn profile, a website or GitHub link, what you will use Open DS for, the AI clients you use and your team size. We keep them to decide on your request, to email you about it and, if you are approved, to send your key link. We record when you agreed to this policy.
The people who review requests are the Open DS admins. We do not sell or share your details with anyone else.
We send email through Resend: that we got your request, and, if you are approved, a link that shows your key once. The link works once and expires after 7 days. The email never contains the key itself.
Your key and the hosted MCP server
Your key is shown once and stored only as a hash. When your AI calls the hosted MCP server, we keep one row per tool call: a hash of your key, the tool’s name, the scheme it asked about and the type of thing it asked for (for example “question”). We never keep the question, your prompts, your files or your IP address. These rows are deleted after 30 days. Admins see use only by key hash, not by name.
Cookies
The public site sets none. The admin area sets one cookie that keeps an admin signed in for up to 7 days. It is only set for admins who sign in.
How long, and deleting it
We keep your request and key for as long as you have a key or your request is open. Usage rows go after 30 days. To have everything about you deleted (your request, your keys and their usage), write to contact@open-ds.dev or reply to any email you got from Open DS. We delete it and confirm.
Changes
If we change what we keep, we change this page first and update the date at the top.