Download privacy

Effective 23 October 2026. Native package downloads record an affirmative acceptance event to associate the selected package with the exact applicable terms. No account or email is required.

Acceptance records

Each private record contains a random event identifier, UTC acceptance time, package identifier, release and SHA-256, and the accepted terms identifiers, versions and SHA-256 hashes. The application does not add an IP address, user agent, name, email or download token to this record. This anonymous event establishes what the service received, not the verified identity or legal capacity of a person.

Records are scheduled for deletion after 30 days using private storage lifecycle rules; deletion is asynchronous and may take additional provider processing time. Only the site's authorized operator can access the private record store. Records are not published or used for advertising.

Essential download cookie

Acceptance creates an HttpOnly, Secure, SameSite=Strict cookie scoped to the selected package for five minutes. It binds download authorization to that package and the current terms. It is not an analytics cookie and is not accessible to the page's JavaScript. Closing it or expiry requires a new acceptance for another request. Separate MIT Skill downloads do not create an acceptance event or require this cookie.

Hosting and questions

Cloudflare processes network requests to operate and protect this site. Such processing can include connection information independently of this application's minimal acceptance records. The application does not enable Worker request logging; infrastructure processing and retention also depend on the provider's policies. See Cloudflare's privacy policy. No claim is made that the hosting provider never processes an IP address.

For questions or an event-specific request, use the contact page and include the event identifier shown after acceptance if available. Do not send credentials.