Privacy Policy
Effective 2026-09-21. Short version: this site collects nothing. The software runs on your machines, and your keys stay there too.
What this site collects
Nothing. No accounts, no analytics, no cookies, no fingerprinting, no newsletter, no contact forms. There is no server-side code on this site that records who you are or what you read.
Third parties you touch by loading this site
What: pages are served by GitHub Pages, which keeps standard server logs (IP address, user agent) under GitHub's privacy statement. Control: none on our side — that logging happens at the host, not in our pages.
What: stylesheets load from fonts.googleapis.com / fonts.gstatic.com, which reveals your IP address to Google under the Google Privacy Policy. Alternative: block third-party fonts in your browser — the site falls back to system fonts.
The software itself is local-first
The HeLa MCP servers run on your own machines over stdio. API keys in client configs (OpenRouter, GitHub, Google) stay in your local files and are sent only to the provider you configured. Needle model telemetry is forced off in our integration, and there is no phone-home in the codebase — every line is auditable in the public repositories.
Changes and contact
If this policy ever changes, the change ships as a dated commit to this page. Questions: open an issue at Hela-Ecosystem/hela-mcp-ecosystem.