Privacy
What skills.workrr.ai keeps
Browsing the directory needs no account and sets no cookies.
Adding a skill
workrr stores the link you submit (a public GitHub repository and a path), when you submitted it, and a hash of your IP address mixed with the day's date, used only to limit how many links one place can send per hour and cleared after 2 days. The link becomes a public scan target in the public ledger. Your IP address and its hash never go there.
Signing in with GitHub
Signing in is optional. GitHub tells workrr your account id, login, name, avatar and verified primary email address. workrr keeps the id, login, name and avatar so it can show your account and mark skills you own as verified. It doesn't keep your GitHub token, so it can't act on your repositories or read anything private.
Your email address is stored only if you tick the box to get email from workrr. Until then, it's held with your sign-in session (at most 30 days) so the account page can offer that box. Signing in sets one cookie that holds your session and nothing else. Signing out ends the session and removes it.
If you opt in, workrr may email you about workrr trust and the skills directory: new features, and changes to the level of skills you own. Every email has an unsubscribe link. Unsubscribing, or unticking the box on your account page, deletes your stored address. workrr doesn't sell or share it.
Verified owners
When you verify an organization, workrr checks the public file workrr.yml in the organization's .github repository and shows a link to it at the commit it checked, so anyone can confirm the claim. The directory shows which login verified an owner.
Where it's kept
In a Cloudflare D1 database run by workrr. To have your account deleted, email info@workrr.ai from the address on your GitHub account.
Listings, findings and your rights
The directory lists public repositories by owner, name and commit. If you're a listed owner, you can object to a listing or report a wrong finding. The workrr trust privacy page explains how that works, and sets out who is responsible, the legal bases, the Ask Ava assistant, transfers, and your rights under GDPR and US state laws, including California. workrr doesn't sell or share personal information, and it honours Global Privacy Control.