Information currently collected
The site uses Vercel Analytics for aggregate product and page-usage measurement. Hosting infrastructure may also create ordinary request logs containing time, route, browser information, and network address. MCP100 does not currently provide user accounts or send a newsletter.
The MCP submission form stores the details a person chooses to provide, including an optional contact value, in a pending local review table. Submitted records do not enter rankings automatically. Contact values and internal review notes are visible only to the authenticated administrator review surface and never appear in public pages or public API responses.
Purpose, retention, and sharing
Data is used to operate and improve the site, investigate errors, review submitted MCP sources, and protect the service. A final production retention schedule and processor list will be published before launch. MCP100 does not sell personal information.
Submission abuse protection uses a dedicatedSUBMISSION_RATE_LIMIT_SECRET to HMAC a best-effort client address and coarse user-agent value. Only the digest and fixed-window counters are stored; raw addresses and user-agent values are not retained in the submission rate-limit table. Proxy header trust will be documented after a production host is selected. Contact retention and deletion handling remain legal-review follow-ups.
Choices and requests
Do not submit confidential data or credentials. A verified privacy contact and process for access, correction, and deletion requests will be published before public beta data collection begins. Browser-level controls can limit analytics where supported.
Cross-border processing and changes
MCP100 is operated from Canada. Hosting and analytics providers may process data in other countries. Material policy changes will receive a new effective date on this page.