Privacy Policy

This Privacy Policy describes how SKILLMARKDOWN PTY LTD, doing business as Skillmarkdown, collects, uses, shares, and protects personal information through the Skillmarkdown website, registry, hosted services, APIs, documentation, and related tooling.

Privacy requests and legal notices: privacy@skillmarkdown.com. Security reports: security@skillmarkdown.com. General legal notices: legal@skillmarkdown.com.

This Privacy Policy applies to personal information collected through Skillmarkdown's website, documentation, registry, hosted services, APIs, account systems, CLI-connected workflows, wallet-related surfaces, support channels, and related product surfaces that link to this notice.

This Privacy Policy does not apply to third-party websites, repositories, identity providers, package managers, or other services that Skillmarkdown does not own or control, even if those services interoperate with Skillmarkdown.

For personal information processed under South African privacy law, SKILLMARKDOWN PTY LTD is the responsible party for the processing described in this notice unless a separate agreement says otherwise.

Skillmarkdown is currently in a development preview and devnet testing phase. Preview features may collect test records tied to accounts, packages, listings, wallet addresses, signatures, transactions, purchases, claims, receipts, and entitlements.

Devnet records are test records, but they may still identify or relate to you when linked with your account, wallet address, username, package, device, network metadata, support messages, or transaction activity.

Blockchain data may be public, persistent, copied by third parties, indexed by explorers, and outside Skillmarkdown's ability to delete or correct.

We may collect account and identity information such as name, username, email address, organization affiliation, authentication identifiers, account preferences, profile content, support identifiers, and account status when you register, sign in, administer tokens, or manage your profile.

We may collect service-use and technical information such as IP address, device and browser data, approximate location inferred from network data, log files, request metadata, API usage, CLI-connected service activity, token activity, cookie or local-storage identifiers, security events, diagnostics, and performance data.

We may collect content and registry information that you submit or generate through the service, including package metadata, README content, version history, dist-tags, artifacts, descriptions, tags, listings, price fields, publisher identifiers, support messages, feedback, and operational records associated with publication, installation, discovery, market, wallet, purchase, and claim workflows.

When you use wallet, listing, checkout, entitlement, or claim features, we may process wallet addresses, public keys, provider identifiers, chain family, network, wallet connection keys, verification status, message signatures, signature timestamps, transaction signatures or hashes, token mints, amount fields, purchase identifiers, listing identifiers, claim proofs, payout connection records, receipt data, entitlement records, and related status events.

We may receive some of this information from your browser, wallet provider, Skillmarkdown backend services, Solana RPC providers, indexers, explorers, or other third-party infrastructure.

We use this data to verify wallet control, prepare and finalize transactions, reconcile preview records, prevent fraud or abuse, provide support, troubleshoot network behavior, and protect service integrity.

We may use cookies, local storage, session storage, browser storage, SDK state, and similar technologies to keep you signed in, remember preferences, protect sessions, store pending purchase or receipt state, detect abuse, measure reliability, and improve product behavior.

Your browser or device may let you block or clear some storage. Blocking storage may prevent authentication, wallet, registry, checkout, or account features from working correctly.

We use personal information to operate and improve Skillmarkdown, including authenticating accounts, enforcing registry and platform policies, processing package publication and installation workflows, verifying wallets, preparing and reconciling devnet market records, providing support, responding to security events, and maintaining service reliability.

We may use information to analyze service performance, debug product behavior, investigate misuse, comply with legal obligations, enforce our terms and policies, communicate about releases or service changes, maintain audit trails, and protect Skillmarkdown, our users, and third parties.

We may use aggregated or de-identified information for analytics, reliability, abuse prevention, product planning, and reporting.

Where required by law, we process personal information under one or more legal bases, including performance of a contract, compliance with legal obligations, legitimate interests, consent, or protection against fraud, abuse, security threats, and service misuse.

Our legitimate interests may include operating and securing the service, improving product reliability, enforcing terms, preventing abuse, debugging failures, supporting users, and maintaining registry and devnet-market integrity.

Content you publish to the registry or make visible through Skillmarkdown, including package metadata, descriptions, README content, version history, dist-tags, publisher identifiers, listings, display prices, and similar package-facing content, should be treated as broadly shared information.

Wallet addresses, transaction hashes, signatures, token transfer data, and other blockchain records may be public or discoverable through wallets, RPC providers, explorers, indexers, and blockchain network participants.

Do not include secrets, private keys, credentials, personal data, regulated data, or confidential material in published package metadata, README content, artifacts, wallet labels, listings, support messages, or public records unless you are authorized and the workflow is designed for that purpose.

We may share information with service providers that help operate Skillmarkdown, such as hosting, storage, authentication, registry infrastructure, database, analytics, observability, email, support, security tooling, fraud-prevention, and product operations providers, subject to appropriate contractual or operational safeguards.

We may share or expose information as needed to provide registry, package, listing, wallet, checkout, transaction, claim, receipt, or entitlement features, including through wallet providers, Solana RPC providers, blockchain networks, explorers, indexers, package managers, repositories, and other systems you choose to use.

We may disclose information if required by law, legal process, or governmental request, or when necessary to protect rights, safety, security, service integrity, users, third parties, or to investigate suspected abuse, fraud, or policy violations.

We may transfer information as part of a merger, acquisition, financing, reorganization, asset sale, bankruptcy, or similar business transaction involving Skillmarkdown.

Third-party services may collect information directly from you or your device under their own terms and privacy policies. These may include identity providers, hosting providers, package registries, GitHub, npm, wallet extensions, wallet-standard providers, Solana networks, RPC providers, blockchain explorers, indexers, email providers, support providers, analytics tools, and security vendors.

Skillmarkdown does not control third-party privacy practices. Review third-party notices before using connected services, signing wallet messages, submitting transactions, or publishing through external systems.

We retain information for as long as reasonably necessary to operate the service, comply with legal obligations, resolve disputes, enforce agreements, investigate abuse, maintain security logs, preserve registry integrity, reconcile preview records, and protect against fraud or misuse.

Some records may persist longer where needed for audit, legal, security, backup, abuse-prevention, registry-integrity, blockchain, or operational reasons. Public blockchain data may persist independently of Skillmarkdown even if we delete or de-identify related account records we control.

We use administrative, technical, and organizational measures designed to protect personal information. No method of storage or transmission is completely secure, and Skillmarkdown cannot guarantee absolute security.

You are responsible for maintaining the security of your credentials, tokens, wallets, private keys, devices, browsers, and sessions, and for promptly reporting suspected compromise.

Skillmarkdown may process or store information in multiple jurisdictions depending on infrastructure, vendors, wallet networks, support operations, and service routing. Where required, we use appropriate safeguards for cross-border transfers.

By using Skillmarkdown, you understand that your information may be processed outside your country of residence, including in countries with privacy laws that differ from those in your jurisdiction.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export certain personal information, withdraw consent where processing is based on consent, complain to a regulator, or appeal a privacy decision.

We may need to verify your identity before fulfilling a request and may decline requests where permitted by law, including where deletion would conflict with legal obligations, security, fraud prevention, registry integrity, public blockchain persistence, or other protected interests.

South African users may have rights under POPIA, including rights to request access or correction and to lodge complaints with the Information Regulator. Other regional privacy rights may apply depending on your location.

If a U.S. state privacy law applies to you and to Skillmarkdown, this section supplements the rest of this notice. The categories of personal information we may collect include identifiers, internet or electronic network activity, account records, commercial or transactional records, approximate location inferred from network data, user-generated content, inferences from service use, and sensitive information only where you provide it or where it is needed for security, authentication, wallet, or compliance purposes.

We use and disclose these categories for the purposes described in this notice. We do not knowingly sell personal information or knowingly share it for cross-context behavioral advertising. If our practices change, we will update this notice and provide any required choice mechanisms.

Depending on applicable law, you may have rights to know, access, correct, delete, port, opt out, limit certain sensitive-information use, or appeal. Contact privacy@skillmarkdown.com to exercise rights.

Skillmarkdown is not directed to children and is not intended for use by individuals who are not legally able to form binding agreements under applicable law. Do not use Skillmarkdown if you are under 13 or under the minimum age required by your local law to use this type of service.

If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

We may update this Privacy Policy from time to time. If we make a material change, we may provide notice through the website, product interface, documentation, email, or another reasonable method.

The updated Privacy Policy will become effective on the date posted unless a later date is stated.

For privacy questions or requests, contact privacy@skillmarkdown.com. For legal notices, contact legal@skillmarkdown.com. For security issues, contact security@skillmarkdown.com.

We aim to respond to verified privacy requests within a reasonable period and, where required by applicable law, within the timelines set by that law. If we deny a request, we may explain the basis for the denial where required.