Privacy
Privacy policy
This policy covers the website at gaspwiki.com and the GASP Standard MCP server, whether you run it on your own machine from npm or connect to the hosted endpoint. Gareth O'Shea (403PageLabs) maintains both. Last updated 2026-11-07.
What the MCP server collects
The MCP server answers questions about a public standard. Every tool reads the GASP Standard data that ships with the server and returns text. The server has no accounts, no sign-in and no database.
- Local server (
npx gasp-standard-mcp). Runs on your machine. The only network request it makes is a version check against gaspwiki.com at start, which sends nothing about you. Tool inputs and outputs stay on your machine. - Hosted server (the Claude connector). Each request carries the tool name and its arguments, which may include a mapping, a schema or metric definitions you paste in. The server uses them to compute the answer for that request and discards them when the response is sent. Nothing you send is stored, logged in full or used for any other purpose.
- Operational logs. The hosting provider records request metadata (time, path, status, response size, the connecting IP address) for up to 30 days to keep the service running and to investigate abuse. Logs do not include tool arguments or responses.
What the website collects
- Standard server logs at the hosting provider (Cloudflare), kept for a short period for security and performance.
- The metrics health check on the test page runs in your browser. If an email capture is shown and you enter an address, it is sent to us through our email provider (Resend) so we can send you your results, and used for nothing else.
- No advertising, no cross-site tracking and no analytics cookies.
How it is used and shared
Data is used only to answer your request or to run the service. We do not sell it, share it with third parties for their own purposes or use it to train models. The hosting providers named above process data on our behalf under their own terms.
Retention
Tool requests to the hosted server are not retained. Operational logs are kept for up to 30 days. An email address given on the test page is kept until you ask us to delete it.
Your rights and contact
You can ask what we hold about you, ask for it to be corrected or deleted, or raise any question about this policy at [email protected]. Changes to this policy are published on this page with a new date.