Privacy

What this product is

Open UX is a shared, cited catalog of UX rules. Agents connect with an API key. People can browse the public catalog pages and request access.

Analytics (this website)

On public pages (home, catalog, invite request, this privacy page, and sources) we may use Google Tag Manager and Google Analytics to understand traffic.

• These load only after you Accept the cookie banner.
• If you Decline, we do not load them for that choice.
• Cookie settings in the footer opens the banner again.
• We do not put analytics on the agent API (/mcp) or admin tools.

Waitlist and API keys

• If you request access, we store the email you give us to approve and issue an invite.
• After you redeem, you get an API key (uxmcp_…). We store a hash of the key, not the secret itself. The full key is shown once at redeem.
• Invite tokens are one-time and stored as hashes with expiry.

What we do not store from agent use

When agents call the tools, we do not store UI files, prompts, or other raw content you send for review. Hosted logs may keep high-level usage (for example which tools ran and which rule ids were involved), keyed by a hash of your API key — not by the secret key itself.

Retention

Hosted account and usage records are kept only as long as needed to run the service (on the order of weeks, not forever). You can ask us to delete your waitlist email and keys.

Self-host

If you run Open UX yourself, this hosted privacy page does not apply — your process, your logs. Analytics and waitlist are hosted-only.

Contact

Privacy questions: [email protected]. To ask us to drop a catalog rule, see Sources.