Privacy
MotionSpec — Privacy Policy
What MotionSpec is
MotionSpec provides an npm package, a CLI, and a hosted MCP (Model Context Protocol) service that validates and compiles web-animation specifications.
Data we collect (hosted MCP service)
- API key material: customer keys are stored only as SHA-256 hashes in our key registry; we cannot recover plaintext keys.
- Request telemetry (Cloudflare Analytics Engine): per request we durably store only aggregate dimensions — an operation/outcome label (e.g. request, rate-limited, escalate), the compile target (e.g. WAAPI/GSAP), a non-identifying key hash, a timestamp, and coarse performance counters (attempts and milliseconds). Raw request contents, prompts, error text, and personal data are stripped by a hard whitelist before storage and are never written to durable telemetry.
- Operational logs: standard Cloudflare edge metadata (IP for rate-limiting at request time). Rate-limit decisions use the connecting IP and key identity transiently.
- Website: this website sets no cookies, uses no tracking, and runs no web analytics; no user profiles are created. The free motion check processes the URL you enter and your IP address transiently, for rate-limiting only (60-second window), and stores neither.
What we do NOT do
- No sale of data
- No advertising profiles
- No third-party analytics beyond Cloudflare infrastructure
- No storage of compiled output beyond transient processing
Processors / third parties
- Cloudflare, Inc. — hosting (Workers/KV/Analytics Engine), edge delivery, and e-mail routing for hello@motionspec.dev
- npm / GitHub — package distribution
Retention
- Telemetry: aggregated counters, retained per Cloudflare Analytics Engine defaults
- Key hashes: until key revocation
- Backups/logs: ≤30 days
Your rights (GDPR)
Access, rectification, erasure, restriction, portability, objection; and the right to complain to a supervisory authority — for us, the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach. Contact: hello@motionspec.dev. Legal basis: Art. 6(1)(b) (service provision), 6(1)(f) (abuse prevention).